Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountLowContained

MUTUAL OF OMAHA MORTGAGE, INC.

bd_ced6519227360b63 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 30, 2023

Filed

Sep 21, 2023

To disclose

12 weeks

Affected

1state residents only

Linked

4 filings

Confidence

65%

Full breach record for MUTUAL OF OMAHA MORTGAGE, INC. →4 incidents on file

Mutual of Omaha Mortgage notified Montana residents on September 22, 2023, that an employee's email account was compromised via phishing on June 30, 2023. The incident exposed names, addresses, and loan numbers. The company reset passwords, blocked phishing addresses, and provided 12 months of Experian identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 83 days

Jun 30, 2023

Discovered

Sep 21, 2023

Filed

vs. sector median

+3 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_0a5b01d0fff4b1322023-09-22 · +1dVerified
Maine State AGbd_3e6dad31bf8c2dd32023-09-19 · +2dCandidate
Indiana State AGbd_f8725594240537f52023-08-09 · +43dVerified

Name: MUTUAL OF OMAHA MORTGAGE, INC.
norm: mutual of omaha mortgage

Name: MUTUAL OF OMAHA MORTGAGE, INC.
norm: mutual of omaha mortgage
Industry: Financial Servicesllm

Discovered: Jun 30, 2023
Materiality determined: —
Notification sent: Sep 22, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Change the employees’ Microsoft account passwords
Blocked the identified phishing addresses
Re-training the impacted employees on due diligence procedures
Arranged for Experian to provide you identity protection services for 12 months at no cost
Changes made: Re-training the impacted employees on due diligence procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(83 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGAug 9 · first

Maine State AG+41d

Montana State AG+43d · this page

Massachusetts State AG+44d

Pattern: first filing Aug 9 (IN), last Sep 22 (MA) — a 44-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-699.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 21, 2023
Raw hash: 991533588d9f282993951236882f65321c3659db8f3699d7693e8650be65e829

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMUTUAL OF OMAHA MORTGAGE, INC.

Victim entityMUTUAL OF OMAHA MORTGAGE, INC.

Incidentdiscovered Jun 30, 2023

Stated responseChange the employees’ Microsoft account passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov