Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

Veterans First Mortgage

bd_c66d19ae7debaf39 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 29, 2021

Filed

Dec 8, 2021

To disclose

6 weeks

Affected

2state residents only

Linked

5 filings

Confidence

66%

Full breach record for Veterans First Mortgage →2 incidents on file

Veterans First Mortgage notified Montana residents of a data security incident discovered on October 29, 2021, involving the compromise of two employees' email accounts. The incident likely exposed personal information including names, DOBs, SSNs, driver's license numbers, and financial account details. The company secured the accounts, investigated, provided security training, and offered two years of free credit monitoring via Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 40 days

Oct 29, 2021

Discovered

Dec 8, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_704713eed352bf492021-12-08Candidate
Massachusetts State AGbd_a68e816048a52dd92021-12-08Verified
Indiana State AGbd_c1a41f05da632bcf2021-12-08Verified
New Hampshire State AGbd_f939b349475019182021-12-08Verified

Name: Veterans First Mortgage
norm: veterans first mortgage

Name: Veterans First Mortgage
norm: veterans first mortgage
Industry: Financial Servicesllm

Discovered: Oct 29, 2021
Materiality determined: —
Notification sent: Dec 8, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Took prompt steps to immediately contain the incident and investigate
Secured the email accounts
Provided regular reminders and information security training for employees
Arranged to provide tools for credit monitoring, fraud detection, and identity restoration at no cost for two years through Experian IdentityWorks
Changes made: Provided regular reminders and information security training for employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGDec 8 · first

Massachusetts State AGDec 8 · first

Indiana State AGDec 8 · first

New Hampshire State AGDec 8 · first

Montana State AGDec 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-134.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 8, 2021
Raw hash: c139f403d5b73e825ccdc0475b122328c421263d219a2482b480e253fa257108

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityVeterans First Mortgage

Victim entityVeterans First Mortgage

Incidentdiscovered Oct 29, 2021

Stated responseTook prompt steps to immediately contain the incident and investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov