MisusePrivilege AbuseEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
PHH Mortgage Corporation
bd_f21e69974ef4ceaf · schema v1 · pii pii-v1
Full breach record for PHH Mortgage Corporation →PHH Corporation notified individuals that a temporary worker, who had been indicted for identity fraud unrelated to PHH, may have accessed personal information of current and former employees and applicants. The data accessed included names, addresses, email addresses, telephone numbers, dates of birth, Social Security numbers, and I-9 alien registration numbers. PHH initiated a review of the worker's access and is cooperating with law enforcement. No evidence of data misuse was found. PHH offered 18 months of identity protection services.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-41751
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 10, 2013
- Raw hash
- 839dc32ad4fa3ea168029a7e1ed9454368605134fb20f79be1dc7718326831cf
Reporting entity
- Name
- PHH Mortgage Corporationnorm: phh mortgage
Victim entity
- Name
- PHH Mortgage Corporationnorm: phh mortgage
Incident
- Discovered
- Apr 3, 2013
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Insider
- Threat actor
- Partner
- Third party
- via Temporary workerContractor
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.