AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancialMediumResolved

Wyndham Capital Mortgage, Inc.

bd_cc2233e97e912c03 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 18, 2020

Filed

Oct 16, 2020

To disclose

28 days

Affected

569state residents only

Linked

9 filings

Confidence

71%

Full breach record for Wyndham Capital Mortgage, Inc. →2 incidents on file

Wyndham Capital Mortgage, Inc. notified the Washington AG of a data incident on Oct 16, 2020. On Sept 18, 2020, an email containing PII (names, SSNs, loan data) was sent in error to an unauthorized recipient. 569 Washington residents were notified. No evidence of misuse was found. Remediation included employee training and credit monitoring offers.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d28 days discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 28 days

Sep 18, 2020

Begins

Sep 18, 2020

Discovered

Oct 16, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

California State AGbd_13335c5e0f27c9da2020-10-16Verified
Indiana State AGbd_528ab8d4039f82242020-10-16Verified
Montana State AGbd_6aaeaccce23227b42020-10-16Candidate
Oregon State AGbd_953367431d1c40dd2020-10-16Verified

Show 4 more filings ↓up to 52d gap

New Hampshire State AGbd_ae2039eef24cef912020-10-16Verified
Massachusetts State AGbd_a1819141a7839c822020-10-20 · +4dVerified
New Hampshire State AGbd_59d707efcd3f49532020-10-23 · +7dVerified
Indiana State AGbd_5b57becafb3988572020-08-25 · +52dVerified

Name: Baker, Donelson, Bearman, Caldwell & Berkowitz, A Professional Corporation
norm: baker donelson bearman caldwell berkowitz a

Name: Wyndham Capital Mortgage, Inc.
norm: wyndham capital mortgage
Industry: Financial Servicesllm

Discovered: Sep 18, 2020
Breach occurred: Sep 18, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 16, 2020
Affected individuals: 569state-resident count only
Data types: Identity (basic)Government IDFinancial
Data elements: NameSocial Security number
WA-stated cause: Theft or Mistake
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unknown

During the incident: Attempted recall of the email
Attempted communications to the mailbox owner and service provider to have the email deleted
Provided additional training to employees
Strengthen system controls and monitoring
Put additional protections in place
Changes made: Provided additional training to employees
Strengthen system controls and monitoring
Put additional protections in place
Offered one (1) year of free credit monitoring and $1 million in identity theft insurance through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Indiana State AGAug 25 · first

California State AG+52d

Indiana State AG+52d

Montana State AG+52d

Oregon State AG+52d

New Hampshire State AG+52d

Washington State AG+52d · this page

Massachusetts State AG+56d

New Hampshire State AG+59d

Pattern: first filing Aug 25 (IN), last Oct 23 (NH) — a 59-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10342.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2020
Raw hash: e37ca9c6b2a059c3a8c0ad4f0ecc7035a763fefba55921c202aecc03d8c52226

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityBaker, Donelson, Bearman, Caldwell & Berkowitz, A Professional Corporation

Victim entityWyndham Capital Mortgage, Inc.

Incidentdiscovered Sep 18, 2020

Stated responseAttempted recall of the email

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com