This is a most excellent place for technology news and articles.
Not only is this breach incredibly bad - exposing SSN, DOB, bank account numbers, address - the company slow walked reporting what was happening in real time.
The hackers were openly posting about the incompetence of Mr. Cooper's IT team, so security firms and journalists knew that Mr. Cooper was compromised even though the company stated it was 'just an outage' then they claimed it impacted 4 million users, when it turned out to over 14 million. Unreal.
I only found out from seeing it here. No email, no app notification.
I go to the site and I’m told I get two years of credit monitoring, so at least I got that going for me. It says I need to get an activation code from my mortgage account.
Guess what’s nowhere to be found in my mortgage account? Yep.
This is some bullshit of the highest order.
I got an email from them today.
Did anyone that uses them receive an email from them about it? I sure as hell have not...
Nothing here! My mortgage was bought by Mr. Cooper in September so I just made it into the system before this breach. This article is the first I am hearing that my SSN and Bank Account info was breached :(
And here I was thinking that disclosure was required by law.
I did, about a month ago.
EDIT: Went back and looked at it. It was just a generic notification that an incident had occurred and that they were taking steps to address it. No details.
Same. When I called to see how it would affect me I was told it was an outage, not a breach.
A Message to Mr. Cooper Customers
On October 31, 2023, our information security team identified an external threat to our network and locked down our systems while we resolved the issue. Over the following weeks, our investigation revealed that certain customer personal information had been compromised. We have been working closely with cyber security experts to determine the full extent of the impact.
We take our role as your mortgage company very seriously, and there is nothing more important to us than maintaining your trust. We truly appreciate your patience as we’ve worked through this situation.
Please take comfort knowing we are adding further security enhancements to help prevent incidents like this from happening in the future, and we are providing two years of free credit monitoring and identity protection services to any customer who would like to enroll. You will receive a letter in the mail soon with more information and next steps.
I am deeply sorry for any concern this incident may have caused. Making your homeownership journey as smooth as possible is our top priority, and we intend to make this right for you.
Sincerely,
Jay Bray
Chairman & Chief Executive Officer, Mr. Cooper Group
That looks remarkably like an email I have not received.
They emailed about an outage and delayed payments around that time
not yet
They should have to pay out damages for shit like this
I don't think any loan holders would be affected. They would have to pay to repair their servers and other systems. There should probably be stricter regulations on digital security for important companies like this.
I think companies like Mr. Cooper just manage the mortgages on behalf of Freddie Mac, so unfortunately the hackers can't do everyone a solid and just delete them.
Unless they are truly incompetent, there’s no way they could do that regardless. They’d need a no-backup solution, or at least no cold backups.
Oh yeah, back in October. i was like "WTF? AGAIN?!"
Is Mr. Cooper still hangin'!?
They just bought my mortgage from Wells Fargo after WF had it for a decade. I just made my first payment a couple weeks ago
Woosh
So good to know that anyone who wants to can buy our PII and leave it vulnerable to mischief.
