Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

LoanCare Notifying 1.3 Million of Data Breach Following Cyberattack on Parent Company 

LoanCare is informing 1.3 million individuals that their personal information was compromised in a data breach.

Mortgage servicing firm LoanCare has started informing more than 1.3 million individuals of a data breach impacting their personal information.

A subsidiary of Fidelity National Financial (FNF), LoanCare provides loan subservicing for mortgage loaners, including banks, credit unions, and mortgage firms.

The data breach was the result of a cyberattack on FNF’s internal systems, LoanCare says in a notification letter sent to the impacted individuals, a copy of which was submitted to the Maine Attorney General’s Office.

FNF disclosed the attack in late November in a Form 8-K filing with the US Securities and Exchange Commission, revealing that the incident was identified on November 19 and that it resulted in business disruptions.

“We took containment measures such as blocking access to certain of our systems resulting in varying levels of disruption to our businesses. The incident was contained on November 26, 2023. The company is restoring normal business operations and is coordinating with its customers,” FNF said.

LoanCare’s notification letter reveals that the attackers had exfiltrated data from FNF’s systems, including personal information such as names, addresses, Social Security numbers, and loan numbers.

“Upon becoming aware of the incident, FNF commenced an investigation with the assistance of third-party experts, notified certain law enforcement and governmental authorities, and began taking measures to assess and contain the incident,” LoanCare says.

The company says it has no evidence that the stolen personal information might have been used fraudulently. However, it is offering identity monitoring services for free to the impacted individuals.

Advertisement. Scroll to continue reading.

LoanCare told the Maine Attorney General’s Office that more than 1.3 million individuals were affected by the data breach. 

The ransomware group named BlackCat and Alphv recently took credit for the attack on FNF. Several of the cybercrime gang’s websites were seized as part of a law enforcement operation in early December, but the hackers are apparently not ready to give up on their operation

Related: CBS Parent National Amusements Discloses Year-Old Data Breach

Related: Integris Health Data Breach Could Impact Millions

Related: Inmate, Staff Information Stolen in Rhode Island Prison Data Breach

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Allied Universal announced that Deanna Steele has joined the company as CISO for North America.

Former DoD CISO Jack Wilmer has been named CEO of defensive and offensive cyber solutions provider SIXGEN.

Certificate lifecycle management firm Sectigo has hired Jason Scott as its CISO.

More People On The Move

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.