Vista Point Mortgage, LLC

The Maine Office of the Attorney General reported that Vista Point Mortgage, LLC experienced an external system breach, with unauthorized access to employee email accounts between May 21 and June 5, 2024. The breach potentially affected 13,391 individuals in total, including three Maine residents; compromised data included names and Social Security numbers. Written notice to affected individuals began on November 18, 2024, and identity theft protection services were offered for 12 months through IDX.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/13057a09-3173-464a-9740-1cee68b4b3dd.html

TPRM report: https://www.rankiteo.com/company/vista-point-mortgage-llc

"id": "vis812072625",
"linkid": "vista-point-mortgage-llc",
"type": "Breach",
"date": "5/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 13391,
                        'industry': 'Mortgage',
                        'name': 'Vista Point Mortgage, LLC',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access to Email Accounts',
 'customer_advisories': 'Identity theft protection services offered for 12 '
                        'months through IDX',
 'data_breach': {'number_of_records_exposed': 13391,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security Numbers']},
 'date_publicly_disclosed': '2024-11-18',
 'description': 'Vista Point Mortgage, LLC experienced an external system '
                'breach, with unauthorized access to employee email accounts '
                'between May 21 and June 5, 2024. The breach potentially '
                'affected 13,391 individuals in total, including three Maine '
                'residents; compromised data included names and Social '
                'Security numbers. Written notice to affected individuals '
                'began on November 18, 2024, and identity theft protection '
                'services were offered for 12 months through IDX.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': 'High',
            'systems_affected': ['Employee Email Accounts']},
 'initial_access_broker': {'entry_point': 'Employee Email Accounts'},
 'references': [{'date_accessed': '2024-11-18',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Written notice to affected '
                                        'individuals'},
 'title': 'Vista Point Mortgage Email Breach',
 'type': 'Data Breach'}