Nearly 17 million LoanDepot customers had sensitive personal information stolen, including Social Security numbers, in a ransomware attack in January, the company confirmed.
The giant loan and mortgage company told a data breach notification filed with the Maine attorney general’s office that the stolen LoanDepot customer data includes names, dates of birth, email and postal addresses, financial account numbers and phone numbers. The stolen data also includes Social Security numbers, which LoanDepot collected from customers.
The number of affected LoanDepot customers increased from 16.6 million was initially disclosed to federal regulators last month, which did not say what specific customer data was stolen.
LoanDepot was hit by a cyberattack around Jan. 4, which it described at the time as a “data encryption” or ransomware attack. It’s not known if LoanDepot paid a ransom, nor would a company spokesperson say when previously asked by TechCrunch.
The cyber attack left millions of LoanDepot customers dead they cannot make payments or access their online accounts the weeks that followed.
LoanDepot was one of several loan and mortgage companies targeted by malicious hackers in recent months.
Mortgage giant Mr Cooper said hackers stole the personal information of more than 14 million customers during a cyberattack in October, costing the company at least $25 million in additional costs. Weeks later in November, one of the largest home insurance providers in the US, Fidelity National Financial, was hit by a ransomware attack that took the company offline for over a week.
LoanDepot said in its latest regulatory filing that the cyberattack will knock the company’s first-quarter financial profits between $12 million and $17 million.
This story was originally published on January 22, 2024, and was updated on February 26, 2024, with new information about the stolen customer data. Updated on February 27, 2024 with new earnings implications.
Do you work at LoanDepot and know more about the incident? Zack Whittaker can be reached on Signal and WhatsApp at +1 646-755-8849 or via email. You can also contact us via SecureDrop.
