HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

First Washington Mortgage, LLC

bd_d63fb783c52c4878 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 22, 2024

Filed

Nov 13, 2025

To disclose

—

Affected

412state residents only

Confidence

67%

Full breach record for First Washington Mortgage, LLC →

First Washington Mortgage, LLC notified the Maryland Attorney General of a cybersecurity incident discovered on November 22, 2024. Unauthorized actors accessed files containing names, addresses, DOB, driver's license info, bank account info, and SSNs. 412 Maryland residents were notified. The company engaged forensic investigators, disconnected the network, changed credentials, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 22, 2024

Discovered

Nov 13, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed412 affectedView incident

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: First Washington Mortgage, LLC
norm: first washington mortgage
Industry: Financial Servicesllm

Discovered: Nov 22, 2024
Materiality determined: —
Notification sent: Jan 10, 2025
Affected individuals: 412state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Maryland Office of the Attorney General
Initial access: valid_credentials

During the incident: Disconnected all access to its network
Engaged a specialized third-party cybersecurity firm to assist with securing the environment as well as conduct a comprehensive forensic investigation
Changed administrative credentials
Restored its operations in a safe and secure mode
Enhanced its security measures
Engaged our law firm
Offering 12 months of complimentary credit monitoring and related services through TransUnion
Changes made: Enhanced its security measures
Restored its operations in a safe and secure mode
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376157.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: dc5973353699d01a633da03b55e0ec7455094af0080f30926d39daabaa9053ec

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityFirst Washington Mortgage, LLC

Incidentdiscovered Nov 22, 2024

Stated responseDisconnected all access to its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov