Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Veterans First Mortgage

bd_f939b34947501918 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 29, 2021

Filed

Dec 8, 2021

To disclose

6 weeks

Affected · nationwide

7127 in this filing

Linked

5 filings

Confidence

67%

Full breach record for Veterans First Mortgage →2 incidents on file

Veterans First Mortgage notified the NH Attorney General on Dec 8, 2021, of a phishing incident discovered Oct 29, 2021, compromising two employee email accounts. Approximately 712 individuals (7 NH residents) were affected. Data included names, SSNs, driver's licenses, and financial account info. No financial fraud was indicated. Remediation included credit monitoring via Experian and employee security training.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 40 days

Oct 29, 2021

Discovered

Dec 8, 2021

Filed

vs. sector median

2 wks faster

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_704713eed352bf492021-12-08Candidate
Massachusetts State AGbd_a68e816048a52dd92021-12-08Verified
Indiana State AGbd_c1a41f05da632bcf2021-12-08Verified
Montana State AGbd_c66d19ae7debaf392021-12-08Candidate

Name: Veterans First Mortgage
norm: veterans first mortgage

Name: Veterans First Mortgage
norm: veterans first mortgage
Industry: Financial Servicesllm

Discovered: Oct 29, 2021
Materiality determined: —
Notification sent: Dec 8, 2021
Affected individuals: 712state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: phishing_link

During the incident: Took action to investigate the scope of the incident
Confirm that no other Veterans First Mortgage systems were affected
Took steps to further secure its systems
Provide regular reminders and information security training for employees
Contain the incident and investigate
Provided two years of credit monitoring and identity theft protection services to potentially affected individuals through Experian IndentityWorks
Changes made: Provide regular reminders and information security training for employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGDec 8 · first

Massachusetts State AGDec 8 · first

Indiana State AGDec 8 · first

Montana State AGDec 8 · first

New Hampshire State AGDec 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/veterans-first-20211208.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 8, 2021
Raw hash: 8c40e1a2834fa352a34de21039881976d87867d18be6fd8d5a877f6fa02f231e

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityVeterans First Mortgage

Victim entityVeterans First Mortgage

Incidentdiscovered Oct 29, 2021

Stated responseTook action to investigate the scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov