Movement Mortgage, LLC reported a data breach resulting from sophisticated phishing attacks on its email system. Between August 1 and October 1, 2016, unauthorized logins occurred to company email accounts containing customer PII, including names, SSNs, driver's licenses, and financial account details. Movement engaged forensic experts, reset credentials, notified regulators, and provided one year of Kroll identity monitoring to affected individuals.