HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

MEMBER FIRST MORTGAGE, LLC

bd_ec3e2c9146b026fc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 21, 2017

Filed

Jan 26, 2018

To disclose

5 weeks

Affected

2state residents only

Linked

2 filings

Confidence

65%

Full breach record for MEMBER FIRST MORTGAGE, LLC →2 incidents on file

Member First Mortgage, LLC reported unauthorized access to an employee email account affecting 2 New Hampshire residents. Access likely occurred between Nov 25 and Dec 21, 2017. Data involved names, SSNs, addresses, and mortgage account numbers. Victim engaged forensic investigators, notified FBI and local law enforcement, and provided LifeLock identity protection to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 26 days

discovery → filing · 5 weeks / 36 days

Nov 25, 2017

Begins

Dec 21, 2017

Discovered

Jan 26, 2018

Filed

vs. sector median

3 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_26c01762507e230b2018-02-01 · +6dVerified

Name: Varnum LLP
norm: varnum

Name: MEMBER FIRST MORTGAGE, LLC
norm: member first mortgage
Industry: Financial Servicesllm

Discovered: Dec 21, 2017
Breach occurred: Nov 25, 2017 – Dec 21, 2017
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 26, 2018
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralReported to FBIReported to Kent County (Michigan) Sheriff's Department
Initial access: valid_credentials

During the incident: Stopped the unauthorized access
Verified that the unauthorized access to the e-mail account had been terminated
Reported the incident to local law enforcement and to the FBI
Cooperating with law enforcement efforts
Hired a cyber-security firm to assist in conducting an investigation
Changes made: Secured the internal system against further intrusion
Identifying further actions to reduce the risk of this situation recurring
Arranged for a one-year membership in LifeLock Identity Theft Protection Services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJan 26 · first · this page

Massachusetts State AG+6d

Pattern: first filing Jan 26 (NH), last Feb 1 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/member-first-20180126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2018
Raw hash: 28cf174b01a8920da1ce211b22e5ec2ab4236f951c67e9979cd42669380ebfe8

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityVarnum LLP

Victim entityMEMBER FIRST MORTGAGE, LLC

Incidentdiscovered Dec 21, 2017

Stated responseStopped the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov