Hackers stole sensitive personal information from more than 14.6 million Mr. Cooper clients, according to the mortgage and lending giant.
Mr. Cooper said in a complaint with Maine’s attorney general’s office that the hackers took customer names, addresses, dates of birth, and phone numbers, as well as Social Security numbers and bank account details. Mr. Cooper previously stated that a third party organization maintained client financial information and it was secure.
In a separate filing with federal authorities on Friday, Mr. Cooper said that hackers gained personal information on “substantially all of our current and former customers.”
Because of the historical data that the corporation keeps on mortgage holders, the number of impacted victims is substantially higher than the four million current clients that Mr. Cooper states on its website.
The stolen data includes personal information on clients whose mortgages the company had previously purchased or serviced before changing its name to Mr. Cooper, according to Mr. Cooper’s data breach notification letter to concerned victims. Customers who had their mortgages handled by a sibling brand may be impacted, according to the business.
On the day of the hack, October 31, Mr. Cooper first informed customers that its systems were down due to an outage, which it later admitted was the result of a cybersecurity issue. Customers complained to Eltrys about being unable to access their accounts or make mortgage payments.
The lending and mortgage behemoth has not disclosed what kind of virus struck its systems, and when contacted for response, the firm consistently failed to answer Eltry’s queries or clarify whether the company received any requests from the hackers.
Mr. Cooper said in a regulatory filing that the hack would cost the business at least $25 million, up from an expected $5 to $10 million, owing mostly to the two-year expense of identity protection for current and past consumers.
