Mortgage servicing firm LoanCare https://myloancare.com has started informing more than 1.3 million individuals of a data breach impacting their personal information. A subsidiary of Fidelity National Financial (FNF), LoanCare provides loan sub-servicing for mortgage loaners, including banks, credit unions, and mortgage firms. The data breach resulted from a cyberattack on FNF’s internal systems, LoanCare says in a notification letter sent to the impacted individuals, a copy of which was submitted to the Maine Attorney General’s Office.
FNF disclosed the attack in late November in a Form 8-K filing with the US Securities and Exchange Commission, revealing that the incident was identified on 19 November 2023 and resulted in business disruptions. “We took containment measures such as blocking access to certain of our systems, resulting in varying levels of disruption to our businesses. The incident was contained on November 26, 2023. The company is restoring normal business operations and is coordinating with its customers,” FNF said.[1]
LoanCare’s notification letter reveals that the attackers had exfiltrated data from FNF’s systems, including personal information such as names, addresses, Social Security numbers, and loan numbers. “Upon becoming aware of the incident, FNF commenced an investigation with the assistance of third-party experts, notified certain law enforcement and governmental authorities, and began taking measures to assess and contain the incident,” LoanCare says.
The company says it has no evidence that the stolen personal information might have been used fraudulently. However, it offers free identity monitoring services to the impacted individuals. LoanCare told the Maine Attorney General’s Office that more than 1.3 million individuals were affected by the data breach.
The ransomware group BlackCat and Alphv recently took credit for the attack on FNF. Several cybercrime gang’s websites were seized as part of a law enforcement operation in early December 2023, but the hackers are not ready to give up on their operation.
See: https://redskyalliance.org/xindustry/those-darn-blackcats
This article is presented at no charge for educational and informational purposes only.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. Call for assistance. For questions, comments, a demo, or assistance, please get in touch with the office directly at 1-844-492-7225 or feedback@redskyalliance.com
Reporting: https://www.redskyalliance.org/
Website: https://www.redskyalliance.com/
LinkedIn: https://www.linkedin.com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://attendee.gotowebinar.com/register/5993554863383553632
[1] https://www.securityweek.com/loancare-notifying-1-3-million-of-data-breach-following-cyberattack-on-parent-company/
Comments