Approximately 17 million LoanDepot customers had sensitive personal information, including Social Security numbers, stolen in a January ransomware attack, the company confirmed.
The loan and mortgage giant said in a data breach notification filed with the Maine Attorney General's Office that the stolen Loan Depot customer data included names, dates of birth, email addresses and zip codes, financial account numbers, He said it included a phone number. The stolen data also includes Social Security numbers that LoanDepot collected from its customers.
The number of affected Loan Depot customers has increased from 16.6 million when it was initially disclosed to federal regulators last month, but it was not clear exactly what customer data was stolen.
LoanDepot suffered a cyberattack around January 4th, which it said at the time involved “data encryption,” or a ransomware attack. It's unclear whether LoanDepot paid the ransom, and a company spokesperson did not respond to TechCrunch's previous questions.
The cyberattack left millions of LoanDepot customers unable to make payments or access their online accounts in the weeks that followed.
LoanDepot is one of several loan and mortgage companies targeted by malicious hackers in recent months.
Mortgage loan giant Cooper said hackers stole the personal information of more than 14 million customers in an October cyberattack, costing the company at least $25 million in additional costs. A few weeks later, in November, Fidelity National Financial, one of the largest home insurance companies in the United States, was hit by a ransomware attack that took the company offline for more than a week.
Since its last regulatory filing, LoanDepot has not said whether the cyber attack will have a material impact on its financial condition.
This article was originally published on January 22, 2024 and updated on February 26, 2024 with new information about what customer data was stolen.
Do you work at LoanDepot and know more about this case? You can contact Zack Whittaker on Signal and WhatsApp at +1 646-755-8849 or by email. You can also contact us via SecureDrop.