Lyon Real Estate Provides Notice of Data Breach Stemming from a Vulnerability in Third-Party Software

Console and Associates, P.C.
Contact

On September 6, 2023, Lyon Real Estate filed a notice of data breach with the Attorney General of California after discovering that an unauthorized party was able to access the company’s computer network through a vulnerability in a vendor application program used by Lyon. In this notice, Lyon explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, Lyon began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Lyon Real Estate, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Lyon Real Estate data breach. For more information, please see our recent piece on the topic here.

What Caused the Lyon Real Estate Breach?

The Lyon Real Estate data breach was only recently announced, and more information is expected in the near future. However, Lyon’s filing with the Attorney General of California provides some important information on what led up to the breach. According to this source, on approximately May 4, 2023, Lyon detected suspicious activity within its IT network. In response, Lyon launched an investigation into the incident with the assistance of cybersecurity experts.

Lyon’s investigation ultimately confirmed that an unauthorized party was able to access portions of its IT network on various dates between April 18, 2023 and May 4, 2023. Evidently, the unauthorized party gained access to Lyon’s systems through a vulnerability in a vendor’s application that was used by Lyon. It was also determined that the unauthorized party obtained confidential information stored on the company’s computer system.

After learning that sensitive consumer data was accessible to an unauthorized party, Lyon Real Estate reviewed the compromised files to determine what information was leaked and which consumers were impacted. However, the publicly available data breach letter from Lyon Real Estate does not list the specific data types that were subject to unauthorized access, as this portion of the letter was redacted.

However, on September 6, 2023, Lyon Real Estate sent out personalized data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Lyon Real Estate

Founded in 1946, Lyon Real Estate is a real estate company based in Sacramento, California. Lyon Real Estate is primarily focused on providing real estate brokerage services to the greater Sacramento area, including El Dorado County, Yolo County, Nevada County, Sacramento County and Placer County. Lyon also provides mortgages, home warranty, relocation services, property management services, and homeowners insurance products. Lyon Real Estate employs more than 1,000 people and generates approximately $3 billion in annual revenue.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Console and Associates, P.C. | Attorney Advertising

Written by:

Console and Associates, P.C.
Contact
more
less

PUBLISH YOUR CONTENT ON JD SUPRA NOW

  • Increased visibility
  • Actionable analytics
  • Ongoing guidance

Console and Associates, P.C. on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide