Mortgage Bankers Association
ent_7b093106a127a7e87a24bbbf
Disclosures
5
State AG · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
771
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Mortgage Bankers Association
- Normalized
- mortgage bankers— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (5)newest first
- New Hampshire State AGas victim2021-02-23
Mortgage Bankers Association (MBA) notified the New Hampshire Attorney General of a data event affecting 3 NH residents. Suspicious activity on MBA's store website was identified on Dec 8, 2020. Investigation revealed unauthorized acquisition of payment card info (card number, security code) and PII (name, address) between Aug 4 and Sep 4, 2020, via a vulnerability in a third-party library. MBA engaged forensic firms, patched the vulnerability, and notified card brands. Notices to affected individuals began Feb 8, 2021.
- Massachusetts State AGas victim2021-02-08
Mortgage Bankers Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-02-08. 6 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2021-02-08
Mortgage Bankers Association notified Montana residents of unauthorized access to payment card data (numbers, security codes) via a vulnerability in third-party vendor software. Access occurred Aug 4–Sep 4, 2020; discovered Dec 8, 2020. MBA engaged forensic investigators and notified card brands.
- Indiana State AGas victim2021-02-08
Mortgage Bankers Association reported a data breach to the Indiana Attorney General. The breach occurred on 2020-08-04 and was reported on 2021-02-08. 7 Indiana residents were affected. 771 individuals affected in total.
- Maine State AGas victim2021-02-08
Mortgage Bankers Association (MBA) experienced a data breach where malicious code was injected into its store website. This resulted in the compromise of customers' names and financial account information, including credit/debit card numbers with their security codes.