Perry Johnson Mortgage Company, Inc. (PJM) suffered a data breach between March 27, 2023, and May 2, 2023, caused by an external system hacking incident. The breach was detected much later, on June 14, 2024, with consumer notifications issued on July 23, 2024. The incident potentially exposed the personal information of 1,207 individuals, though the exact type of compromised data (e.g., financial records, Social Security numbers, or other sensitive details) was not explicitly detailed in the report. In response, PJM offered 24 months of IDX Identity Theft Protection to affected individuals, indicating concerns over potential identity theft or fraud risks. The delay in discovery (over a year) raises questions about the company’s cybersecurity monitoring and incident response protocols. The breach underscores vulnerabilities in mortgage-related data systems, which often handle highly sensitive customer information.
TPRM report: https://www.rankiteo.com/company/perry-johnson-mortgage-company
"id": "per1013090725",
"linkid": "perry-johnson-mortgage-company",
"type": "Breach",
"date": "3/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 1207,
'industry': 'Mortgage',
'name': 'Perry Johnson Mortgage Company, Inc. (PJM)',
'type': 'Company'}],
'attack_vector': 'External System Breach (Hacking)',
'customer_advisories': '24 months of IDX Identity Theft Protection offered to '
'affected individuals.',
'data_breach': {'number_of_records_exposed': 1207,
'personally_identifiable_information': True},
'date_detected': '2024-06-14',
'date_publicly_disclosed': '2024-07-23',
'description': 'The Maine Office of the Attorney General reported that Perry '
'Johnson Mortgage Company, Inc. (PJM) experienced a data '
'breach between March 27, 2023, and May 2, 2023, due to an '
'external system breach (hacking), potentially affecting 1,207 '
'individuals. The breach was discovered on June 14, 2024, and '
'consumer notifications were sent on July 23, 2024, alongside '
'the offering of 24 months of IDX Identity Theft Protection.',
'impact': {'data_compromised': True, 'identity_theft_risk': True},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Consumer notifications sent on July '
'23, 2024, with 24 months of IDX '
'Identity Theft Protection offered.'},
'title': 'Perry Johnson Mortgage Company, Inc. (PJM) Data Breach',
'type': 'Data Breach'}