UnknownFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

UNITED HOME LOANS, INC.

bd_c882808c23539e0a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 15, 2023

Filed

Dec 6, 2023

To disclose

38 weeks

Affected

Not disclosed

Linked

5 records

Confidence

66%

Full breach record for UNITED HOME LOANS, INC. →

United Home Loans, Inc. notified consumers of a cybersecurity incident detected on March 15, 2023. An investigation confirmed that files containing personal information, including names, Social Security numbers, driver's license numbers, financial account numbers, and digital signatures, may have been subject to unauthorized access on that date. The company engaged cybersecurity professionals and is providing complimentary credit monitoring and fraud assistance services to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday38 weeks discovery → filing

Incident timeline

discovery → filing · 38 weeks / 266 days

Mar 15, 2023

Begins

Mar 15, 2023

Discovered

Dec 6, 2023

Filed

vs. sector median

+30 wks slower

This filing is one of 5 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 239 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_55d9d8cf4605c9072023-04-11 · +239dVerified by operator

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_479fb76ec8cef02c2023-12-06Candidate
Massachusetts State AGbd_950f8cd06f57d37e2023-12-06Verified
Illinois State AGbd_9b5645a5d6d792722023-01-01 · +339dVerified by operator

Name: UNITED HOME LOANS, INC.
norm: united home loans
Domain: uhloans.com

Name: UNITED HOME LOANS, INC.
norm: united home loans
Domain: uhloans.com
Industry: Financial Servicesllm

Discovered: Mar 15, 2023
Breach occurred: Mar 15, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 6, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unknown

During the incident: Commenced a prompt and thorough investigation working very closely with cybersecurity professionals
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout through Identity Force
Changes made: Continues to evaluate and modify its practices and internal controls to maintain the privacy of the personal information in its possession
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(266 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+339d

Massachusetts State AG+339d

Vermont State AG+339d · this page

Pattern: first filing Jan 1 (IL), last Dec 6 (VT) — a 339-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-12-06-united-home-loans-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 6, 2023
Raw hash: 94d12736408ba8d1fb577625df9e830f3213249d3f6167aaffb9676a3a38cea0

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityUNITED HOME LOANS, INC.

Victim entityUNITED HOME LOANS, INC.

Incidentdiscovered Mar 15, 2023

Stated responseCommenced a prompt and thorough investigation working very closely with cybersecurity professionals

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov