loanDepot data breach
Was I affected?
loanDepot confirmed a breach affecting about 16.9 million people, exposing names, addresses, email addresses and phone numbers. You are likely affected if you had or applied for a mortgage with loanDepot before 2024 and received a loanDepot notice letter.
| Announced | Jan 8, 2024 |
|---|---|
| When it happened | January 3-5, 2024 |
| People affected | 16.9 million |
| Data exposed | Names, Addresses, Email addresses, Phone numbers, Dates of birth, Social Security numbers and Bank or financial details |
| Status | Confirmed by the company or a regulator filing |
What happened
Mortgage lender loanDepot was hit by a ransomware attack in early January 2024 that locked customers out of online payments for weeks. Its filing with Maine's attorney general said data on about 16.9 million current and former customers and loan applicants was stolen, including names, contact details, dates of birth, Social Security numbers and financial account numbers. The ALPHV/BlackCat gang claimed the attack.
What should I do?
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Sign up for the free credit or identity monitoring offered in the notice letter before its enrollment deadline.
- Watch your mortgage and bank accounts for changed payment instructions; call loanDepot at its published number before sending any payment.
- Request an IRS Identity Protection PIN so nobody can file a tax return with your Social Security number.
Is there a settlement?
loanDepot data breach settlement (about $86.6M per the settlement site); the claim deadline was May 27, 2025, so new claims are closed.
Check the other services you use →
Sources
- loanDepot ransomware attack exposed 16.9 million individuals · SecurityWeek (news)
- LoanDepot discloses that hackers breached personal data of 16 million customers · Engadget (news)
- LoanDepot paying data breach victims after $86.6 million settlement · ConsumerAffairs (news)