HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
UNITED HOME LOANS, INC.
bd_c882808c23539e0a · schema v1 · pii pii-v1
Full breach record for UNITED HOME LOANS, INC. →United Home Loans, Inc. notified consumers of a cybersecurity incident detected on March 15, 2023, involving unauthorized access to files containing personal information. Impacted data included names, SSNs, driver's licenses, financial account numbers, and dates of birth. The company engaged forensic investigators and is offering credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday38 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by lockbit_3 about this victim predates this filing by 239 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-06-united-home-loans-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 6, 2023
- Raw hash
- 94d12736408ba8d1fb577625df9e830f3213249d3f6167aaffb9676a3a38cea0
Reporting entity
- Name
- UNITED HOME LOANS, INC.norm: united home loans
- Domain
- uhloans.com
Victim entity
- Name
- UNITED HOME LOANS, INC.norm: united home loans
- Domain
- uhloans.com
Incident
- Discovered
- Mar 15, 2023
- Materiality determined
- —
- Notification sent
- Dec 6, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 38 weeks(266 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.