https://www.bleepingcomputer.com/news/security/mortgage-giant-mr-cooper-says-customer-data-exposed-in-breach/ BleepingComputer.com logo * * * * [ ] [Login] [Sign up] * * * * [ ] [Login] [Sign up] * News + Featured + Latest + Microsoft: SysAid zero-day flaw exploited in Clop ransomware attacks Microsoft: SysAid zero-day flaw exploited in Clop ransomware attacks + World's largest commercial bank ICBC confirms ransomware attack World's largest commercial bank ICBC confirms ransomware attack + OpenAI confirms DDoS attacks behind ongoing ChatGPT outages OpenAI confirms DDoS attacks behind ongoing ChatGPT outages + Microsoft: BlueNoroff hackers plan new crypto-theft attacks Microsoft: BlueNoroff hackers plan new crypto-theft attacks + Police takes down BulletProftLink large-scale phishing provider Police takes down BulletProftLink large-scale phishing provider + Microsoft fixes Outlook bug causing attachment saving issues Microsoft fixes Outlook bug causing attachment saving issues + Get more done with this refurbished 32GB iPad for less than $170 Get more done with this refurbished 32GB iPad for less than $170 + Mortgage giant Mr. Cooper says customer data exposed in breach Mortgage giant Mr. Cooper says customer data exposed in breach * Downloads + Latest + Most Downloaded + Qualys BrowserCheck Qualys BrowserCheck + STOPDecrypter STOPDecrypter + AuroraDecrypter AuroraDecrypter + FilesLockerDecrypter FilesLockerDecrypter + AdwCleaner AdwCleaner + ComboFix ComboFix + RKill RKill + Junkware Removal Tool Junkware Removal Tool * VPNs + Popular + Best VPNs Best VPNs + How to change IP address How to change IP address + Access the dark web safely Access the dark web safely + Best VPN for YouTube Best VPN for YouTube * Virus Removal Guides + Latest + Most Viewed + Ransomware + Remove the Theonlinesearch.com Search Redirect Remove the Theonlinesearch.com Search Redirect + Remove the Smartwebfinder.com Search Redirect Remove the Smartwebfinder.com Search Redirect + How to remove the PBlock+ adware browser extension How to remove the PBlock+ adware browser extension + Remove the Toksearches.xyz Search Redirect Remove the Toksearches.xyz Search Redirect + Remove Security Tool and SecurityTool (Uninstall Guide) Remove Security Tool and SecurityTool (Uninstall Guide) + How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo + How to remove Antivirus 2009 (Uninstall Instructions) How to remove Antivirus 2009 (Uninstall Instructions) + How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller + Locky Ransomware Information, Help Guide, and FAQ Locky Ransomware Information, Help Guide, and FAQ + CryptoLocker Ransomware Information Guide and FAQ CryptoLocker Ransomware Information Guide and FAQ + CryptorBit and HowDecrypt Information Guide and FAQ CryptorBit and HowDecrypt Information Guide and FAQ + CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ * Tutorials + Latest + Popular + How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11 How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11 + How to use the Windows Registry Editor How to use the Windows Registry Editor + How to backup and restore the Windows Registry How to backup and restore the Windows Registry + How to open a Windows 11 Command Prompt as Administrator How to open a Windows 11 Command Prompt as Administrator + How to start Windows in Safe Mode How to start Windows in Safe Mode + How to remove a Trojan, Virus, Worm, or other Malware How to remove a Trojan, Virus, Worm, or other Malware + How to show hidden files in Windows 7 How to show hidden files in Windows 7 + How to see hidden files in Windows How to see hidden files in Windows * Deals + Categories + eLearning eLearning + IT Certification Courses IT Certification Courses + Gear & Gadgets Gear + Gadgets + Security Security * Forums * More + Startup Database + Uninstall Database + Glossary + Chat on Discord + Send us a Tip! + Welcome Guide * Home * News * Security * Mortgage giant Mr. Cooper says customer data exposed in breach * * Mortgage giant Mr. Cooper says customer data exposed in breach By Sergiu Gatlan * November 10, 2023 * 04:57 PM * 0 Mr. Cooper Mr. Cooper, the largest home loan servicer in the United States, says it found evidence of customer data exposed during a cyberattack disclosed last week, on October 31. The mortgage loan giant's notice says it's still investigating the nature of the compromised data and will provide affected customers with more information over the coming weeks. Mr. Cooper said the attackers could not access customers' financial information as the impacted systems did not store such data. "Please note that Mr. Cooper does not store banking information related to mortgage payments on our systems," the nonbank mortgage servicer said. "This information is hosted with a third-party provider and, based on the information we have to date, we do not believe it was affected by this incident. As a result, we do not believe that any of our customers' banking information related to mortgage payments was impacted." The company has not disclosed whether the attackers issued a ransom demand after last month's security breach. Mr. Cooper also urged customers to monitor their credit reports and bank accounts, with any signs of suspicious or unauthorized activity promptly reported to their bank. Individuals potentially affected by the incident were also advised to place a 'fraud alert' on their credit bureau files as a precautionary measure and to be alerted about any attempts to open new accounts using their Social Security number. Breach contained via IT shutdown The October 31 security breach forced the company to shut down IT systems, including access to phone lines, support chatbot, and the online payment portal. "We are experiencing a system/technical outage, and we hope to resolve this soon," a system outage banner on Mr. Cooper's website warned. "Customers trying to make payments will not incur fees or any negative impacts as we work to fix this issue. We apologize for any inconvenience this may cause and will continue to provide regular updates." Mr. Cooper system outage bannerMr. Cooper system outage banner (BleepingComputer) Later that day, the company told BleepingComputer that the outage resulted from a cyberattack. It also promised not to charge any fees, penalties, or negative credit reporting related to late payments until it finished restoring impacted systems. Mr. Cooper, formerly Nationstar Mortgage LLC, is a mortgage lending company headquartered in Dallas, Texas, with around 9,000 employees. The home loan servicer says it has a customer base of 4.1 million and is managing loans totaling $937 billion, according to Q3 2023 results reported in October. Related Articles: Mortgage giant Mr. Cooper hit by cyberattack impacting IT systems University of Michigan employee, student data stolen in cyberattack International Criminal Court systems breached for cyber espionage Kwik Trip finally confirms cyberattack was behind ongoing outage Kansas courts IT systems offline after 'security incident' * Breach * Cyberattack * Mortgage * Mr. Cooper * USA * * * * * Sergiu Gatlan Sergiu has covered cybersecurity, technology, and other news beats for more than a decade. Email or Twitter DMs for tips. * Previous Article * Next Article Post a Comment Community Rules You need to login in order to post a comment [Login] Not a member yet? Register Now You may also like: [INS::INS] Popular Stories * Cloudflare Cloudflare website downed by DDoS attack claimed by Anonymous Sudan * Windows Server Microsoft shares temp fix for broken Windows Server 2022 VMs Follow us: * * * * * Main Sections * News * VPN Buyer Guides * Downloads * Virus Removal Guides * Tutorials * Startup Database * Uninstall Database * Glossary Community * Forums * Forum Rules * Chat Useful Resources * Welcome Guide * Sitemap Company * About BleepingComputer * Contact Us * Send us a Tip! * Advertising * Write for BleepingComputer * Social & Feeds * Changelog Terms of Use - Privacy Policy - Ethics Statement - Affiliate Disclosure Copyright @ 2003 - 2023 Bleeping Computer^(r) LLC - All Rights Reserved Login Username [ ] Password [ ] [*] Remember Me [ ] Sign in anonymously [Login] Sign in with Twitter button Sign in with Twitter --------------------------------------------------------------------- Not a member yet? Register Now Reporter Help us understand the problem. What is going on with this comment? * ( )Spam * ( )Abusive or Harmful * ( )Inappropriate content * ( )Strong language * ( )Other [ ] * [ ] Read our posting guidelinese to learn what content is prohibited. Submitting... SUBMIT