Not only is this breach incredibly bad - exposing SSN, DOB, bank account numbers, address - the company slow walked reporting what was happening in real time.
The hackers were openly posting about the incompetence of Mr. Cooper’s IT team, so security firms and journalists knew that Mr. Cooper was compromised even though the company stated it was ‘just an outage’ then they claimed it impacted 4 million users, when it turned out to over 14 million. Unreal.
I only found out from seeing it here. No email, no app notification.
I go to the site and I’m told I get two years of credit monitoring, so at least I got that going for me. It says I need to get an activation code from my mortgage account.
Guess what’s nowhere to be found in my mortgage account? Yep.
This is some bullshit of the highest order.
I got an email from them today.
Did anyone that uses them receive an email from them about it? I sure as hell have not…
Nothing here! My mortgage was bought by Mr. Cooper in September so I just made it into the system before this breach. This article is the first I am hearing that my SSN and Bank Account info was breached :(
I did, about a month ago.
EDIT: Went back and looked at it. It was just a generic notification that an incident had occurred and that they were taking steps to address it. No details.
They emailed about an outage and delayed payments around that time
That’s all I got too.
A Message to Mr. Cooper Customers
On October 31, 2023, our information security team identified an external threat to our network and locked down our systems while we resolved the issue. Over the following weeks, our investigation revealed that certain customer personal information had been compromised. We have been working closely with cyber security experts to determine the full extent of the impact.
We take our role as your mortgage company very seriously, and there is nothing more important to us than maintaining your trust. We truly appreciate your patience as we’ve worked through this situation.
Please take comfort knowing we are adding further security enhancements to help prevent incidents like this from happening in the future, and we are providing two years of free credit monitoring and identity protection services to any customer who would like to enroll. You will receive a letter in the mail soon with more information and next steps.
I am deeply sorry for any concern this incident may have caused. Making your homeownership journey as smooth as possible is our top priority, and we intend to make this right for you.
Sincerely,
Jay Bray
Chairman & Chief Executive Officer, Mr. Cooper Group
That looks remarkably like an email I have not received.
not yet
They should have to pay out damages for shit like this
I don’t think any loan holders would be affected. They would have to pay to repair their servers and other systems. There should probably be stricter regulations on digital security for important companies like this.
I think companies like Mr. Cooper just manage the mortgages on behalf of Freddie Mac, so unfortunately the hackers can’t do everyone a solid and just delete them.
Unless they are truly incompetent, there’s no way they could do that regardless. They’d need a no-backup solution, or at least no cold backups.
I see you don’t work in tech at a large corporation. FYI, even if some of the engineers are good, 99% of management is so incompetent it’s flabbergasting.
The big dumb ass Corp, a fortune 100, that I work for had a jr admin… gave him admin on the vmware cluster. The dude deleted 70% of the VMs before anyone noticed. No backups. All hands on deck rebuilding critical systems for a week.
I’ve worked for large corps before, all had backups, and whenever money was at risk there were cold backups as well.
Even the clients who were failing and going bankrupt kept backups, actually.
Oh yeah, back in October. i was like “WTF? AGAIN?!”
