HSBC Finance Corporation notified California regulators of a data security incident where personal information for certain customer mortgage accounts was inadvertently made accessible via the Internet. Affected data included names, Social Security numbers, account numbers, and phone numbers. HSBC contained the exposure, notified law enforcement and credit bureaus, and offered complimentary identity theft protection services.