Nevada-based Nations Direct Mortgage said more than 83,000 customers were affected by a data breach in late 2023 that exposed Social Security numbers and other sensitive information.
The company said in regulatory filings in Maine and California that it discovered the cybersecurity incident on Dec. 30 and began an investigation. Law enforcement and other government agencies were notified of the cyberattack.
The lender operates in 35 states and has originated hundreds of millions of dollars worth of mortgages since its founding in 2007.
In a letter to victims, the company said, “Our investigation revealed that an unauthorized third party may have accessed and deleted the data of specific individuals across the country.”
“Based on our investigation, we understand that your name, address, social security number, and unique Nations Direct loan number may have been obtained by a bad actor from an unauthorized third party. Masu.”
Victims will receive two years of privacy services from Kroll. The company also posted a copy of the letter on its website.
Multiple law firms are seeking victims for a possible class action lawsuit against Nations Direct Mortgage for this violation.
The incident comes as several mortgage lenders and financial giants in the housing industry face ransomware attacks and other cybersecurity issues.
Cooper, the largest mortgage servicer, spent several months dealing with the problem in late 2023 before announcing that a ransomware attack had compromised the information of about 14.7 million people.
Fidelity National Financial, a Fortune 500 real estate sales title insurance provider, was hit by ransomware in November, disrupting homebuying across the country for days.
Title insurance company First American and Loan Depot, another major retail mortgage lender, announced attacks in December and January that caused widespread problems for homebuyers.
Other important financial services institutions, including MeridianLink, Tipalti, and Moneris, also reported incidents throughout the fall. Industrial and Commercial Bank of China (ICBC), one of the world’s largest banks, also announced a ransomware attack in November.
recorded future
intelligence cloud.
learn more.