Mr. Cooper is sending data breach notifications warning that a recent cyberattack has exposed the data of 14.7 million customers who have, or previously had, mortgages with the company.
Mr. Cooper is a Dallas-based mortgage lending firm that employs approximately 9,000 people and has millions of customers.
The lender is one of the largest servicers in the United States, servicing loans of $937 billion.
In early November 2023, the company announced that it had been breached in a cyberattack on October 30, 2023, which it discovered the following day.
In response to the unauthorized intrusion, the firm was forced to shut down all IT systems, including the online payment portal used to pay loans and mortgages.
A week after the incident disclosure, Mr. Cooper announced it had found evidence that the network intruders conducting the attack had accessed customer data.
It was clarified that no financial information was exposed, but the exact data that had been breached was still subject to the ongoing investigation.
Today, the company submitted a report to the Office of the Maine Attorney General informing that the incident impacted 14,690,284 people.
The exposed data puts impacted individuals at risk of phishing, scams, and social engineering attacks, while bank fraud and identity theft are also possible due to the leak of bank account numbers.
Recipients of the notices are urged to remain vigilant against unsolicited communications and enroll in the offered 24-month identity protection service.
At this time, no further details about the type of cyberattack have been disclosed, and no ransomware gangs have assumed responsibility for an attack on Mr. Cooper.
MongoDB says customer data was exposed in a cyberattack.
Delta Dental of California data breach exposed info of 7 million people.
Dollar Tree hit by third-party data breach impacting 2 million people.
Toronto Public Library confirms data stolen in ransomware attack.
Okta: October data breach affects all customer support system users.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Mon, 18 Dec 2023 13:45:14 +0000