Social EngineeringPhishingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
WEI Mortgage
bd_eff1476b3e5e9283 · schema v1 · pii pii-v1
Full breach record for WEI Mortgage →WEI Mortgage LLC reported a data breach affecting California residents. The incident involved unauthorized access to employee email accounts via a phishing attack between September 13 and 28, 2017. Personal information, including names, addresses, and Social Security numbers, was present in the compromised accounts. WEI Mortgage engaged forensic investigators, notified law enforcement, and offered 24 months of credit monitoring to affected individuals.
California clockDiscovered Sep 20, 2017 → Notified Dec 8, 201779d ✗ CA 60-day late11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f9859b9eb4727984Montana State AGfiled 2017-12-08Candidate
- bd_7165bea61db6abe5Oregon State AGfiled 2018-01-03(26d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-130881
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 8, 2017
- Raw hash
- 6100cba4086fac08d7eaaa1106f43089cd6df6944f34c7558e5abea8492aec95
Reporting entity
- Name
- WEI Mortgagenorm: wei mortgage
Victim entity
- Name
- WEI Mortgagenorm: wei mortgage
Incident
- Discovered
- Sep 20, 2017
- Materiality determined
- —
- Notification sent
- Dec 8, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- notifying state regulators as required by law
- Initial access
- phishing_link
Compliance
- Time to disclose
- 11 weeks(79 days from discovery to filing)
- Compliance flags
- CA 60-day late · 79d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 20, 2017→ Notified: Dec 8, 201779d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.