Security News > 2023 > December > Mr Cooper cyberattack laid bare: 14.7M people's info stolen, costs hit $25M

Mortgage lender Mr Cooper has now admitted almost 14.7 million people's private information, including addresses and bank account numbers, were stolen in an earlier IT security breach, which is expected to cost the business at least $25 million to clean up.

In notifications filed with the US states of California and Maine on Friday, the mortgage giant revealed that scope of the cyberattack was much worse than it believed: highly personal records belonging to millions were snatched by one or more miscreants.

Mr Cooper was formerly known as Nationstar, and is based in Texas.

While the company says it has not seen any evidence that this data has been used for identity theft or fraud, Mr Cooper said it will continue to monitor the dark web for any evidence that the thieves are sharing, leaking, or otherwise misusing the stolen files.

When asked about the breach, a Mr Cooper spokesperson referred The Register to a statement on the biz's website.

In addition to mailing out data breach notifications to millions of people, Mr Cooper also on Friday filed an updated Form 8-K with the US Securities and Exchange Commission and reported higher-than-expected costs related to the digital break in.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/12/18/mr_cooper_breach_disclosure/