[ad_1]
LoanDepot, a major loan and mortgage company, confirmed that personal and sensitive data, including Social Security numbers, were compromised for approximately 17 million customers following a ransomware cyberattack in January.
The data breach was detailed in a notification submitted to Maine’s attorney general’s office, where LoanDepot disclosed the full extent of information obtained by cyber criminals: names, birth dates, email and postal addresses, financial account numbers, phone numbers, and Social Security numbers.
The number of victims reported by LoanDepot increased slightly to 17 million from the initial 16.6 million cited in an earlier press release to federal regulators. An initial report to regulators hadn’t specified which data elements were compromised.
The cyberattack, occurring circa January 8, was described as a ransomware incident involving data encryption. LoanDepot has not disclosed whether a ransom was paid and remained silent when questioned by TechCrunch.
Following the attack, the onslaught of LoanDepot customers reported difficulty in making mortgage payments or accessing their accounts online.
LoanDepot is not the only victim in a recent string of hacks against financial institutions; Mr. Cooper and Fidelity National Financial also experienced breaches, exposing customers’ personal information.
No further updates from LoanDepot have indicated the financial ramifications this breach may impose on the company’s future fiscal health.
The original story broke on January 22, 2024, and was updated on February 26, 2024, with additional information regarding the specifics of the stolen customer data.
LoanDepot insiders wishing to share further details about the breach can reach out to Zack Whittaker via Signal, WhatsApp (+1 646-755-8849), or email. For secure communications, use SecureDrop.
[ad_2]
FAQs About the LoanDepot Cyberattack
Q1: What information was stolen in the LoanDepot cyberattack?
A1: The cybercriminals accessed names, dates of birth, email and postal addresses, financial account numbers, phone numbers, and Social Security numbers of around 17 million customers.
Q2: Has LoanDepot notified affected customers?
A2: LoanDepot has filed a formal data breach notice with Maine’s attorney general’s office, which is a typical protocol for informing affected individuals.
Q3: Did LoanDepot pay a ransom to the hackers?
A3: LoanDepot has not publicly disclosed whether a ransom was paid. The company has not commented on this matter when approached by the press.
Q4: Were other companies affected by similar cybersecurity incidents?
A4: Yes, other financial institutions like Mr. Cooper and Fidelity National Financial have also reported breaches of customer information in recent months.
Q5: How has the breach impacted LoanDepot’s services?
A5: Customers were left unable to perform online transactions such as making mortgage payments shortly after the breach was reported.
Conclusion
The LoanDepot cyberattack serves as a stark reminder of the persistent cybersecurity threats facing financial institutions and the need for robust security measures to protect sensitive customer information. As millions of LoanDepot customers cope with the fallout of this significant data breach, the incident underscores the importance of vigilant personal data monitoring and the prompt reporting of suspicious activities on financial accounts. LoanDepot, alongside other targeted financial players, must now navigate the aftermath while reinforcing their systems to prevent such breaches in the future.
