Vellum Mortgage

On August 15, 2022, Vellum Mortgage fell victim to a ransomware attack, as reported by the Vermont Office of the Attorney General on October 13, 2022. The incident resulted in the potential compromise of sensitive personal information, including names, addresses, Social Security numbers, and financial account details of affected individuals. While the exact number of impacted individuals remains undisclosed, the breach poses significant risks due to the nature of the exposed data, which could facilitate identity theft, financial fraud, or other malicious activities. The attack underscores the severe consequences of ransomware on organizations handling highly confidential customer data, particularly in sectors like mortgage and finance where trust and data security are paramount. The company’s response and mitigation efforts were not detailed in the report, but the exposure of such critical information suggests a high-severity incident with long-term reputational and operational repercussions.

Source: https://ago.vermont.gov/document/2022-10-13-vellum-mortgage-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/vellummortgage

"id": "vel417082025",
"linkid": "vellummortgage",
"type": "Ransomware",
"date": "8/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'unknown',
                        'industry': 'financial services (mortgage)',
                        'location': 'Vermont, USA',
                        'name': 'Vellum Mortgage',
                        'type': 'company'}],
 'data_breach': {'number_of_records_exposed': 'unknown',
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personal information',
                                              'financial information']},
 'date_detected': '2022-08-15',
 'date_publicly_disclosed': '2022-10-13',
 'description': 'The Vermont Office of the Attorney General reported that '
                'Vellum Mortgage experienced a ransomware attack on August 15, '
                '2022. The breach potentially affected personal information '
                'including names, addresses, Social Security numbers, and '
                'financial account information, though the number of '
                'individuals affected is unknown.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers',
                                 'financial account information'],
            'identity_theft_risk': 'high',
            'payment_information_risk': 'high'},
 'references': [{'date_accessed': '2022-10-13',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'title': 'Vellum Mortgage Ransomware Attack (2022)',
 'type': 'ransomware'}