HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Delayed DiscoveryCustomer Data InvolvedData ExfiltratedPIIFINANCIALLowResolved
Perry Johnson Mortgage Company, Inc.
bd_f2d7a9b2bf93e999 · schema v1 · pii pii-v1
Full breach record for Perry Johnson Mortgage Company, Inc. →Perry Johnson Mortgage Company, Inc. (PJM) notified 11 Maine residents of a data security incident affecting a third-party IT vendor. Between March 27 and May 2, 2023, an unauthorized actor gained access to the vendor's systems. PJM was not aware consumer mortgage data was involved until May 2024. Investigation concluded June 14, 2024. PJM offered 24 months of IDX identity theft protection to affected individuals.
Maine clockDiscovered Jun 14, 2024 → Filed with AG Jul 15, 202431d ⏱ ME AG >30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_db77440c655b34b9Montana State AGfiled 2024-07-22(7d gap)Verified
- bd_1c95757b285f6be7Indiana State AGfiled 2024-07-26(11d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3bebfdb8-dce2-41c5-a573-e25547b23ab1.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 15, 2024
- Raw hash
- cb9974fb8109a9fa7d8df2c770d25a1f950b7db578099da1b3c9d1e78ea7d709
Reporting entity
- Name
- Perry Johnson Mortgage Company, Inc.norm: perry johnson mortgage
- Industry
- Financial Services
Victim entity
- Name
- Perry Johnson Mortgage Company, Inc.norm: perry johnson mortgage
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jun 14, 2024
- Materiality determined
- Jun 26, 2024
- Notification sent
- Jul 23, 2024
- Affected individuals
- 11
- Data types
- PIIFINANCIAL
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1195 Supply Chain Compromise
- Threat actor
- External
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- ME AG >30d · 31d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 14, 2024→ Filed with AG: Jul 15, 202431d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.