Security News > 2024 > January > US mortgage lender loanDepot confirms ransomware attack
Leading U.S. mortgage lender loanDepot confirmed today that a cyber incident disclosed over the weekend was a ransomware attack that led to data encryption.
LoanDepot is a major nonbank mortgage lender in the United States, with over $140 billion in serviced loans and roughly 6,000 employees.
As the loanDepot revealed today in an 8-K filing with the U.S. Securities and Exchange Commission, the attackers also encrypted files on compromised devices, but it's unclear which ransomware group was behind the attack.
While loanDepot only mentions that the threat actors gained access to systems and encrypted files, ransomware gangs now also commonly steal corporate and customer data during breaches to use as leverage when pressuring victims into paying a ransom.
In May 2023, loanDepot disclosed a data breach resulting from a cyberattack in August 2022 that exposed customer data.
Mortgage firm loanDepot cyberattack impacts IT systems, payment portal.
- Victoria court recordings exposed in reported ransomware attack (source)
- Stealthy AsyncRAT malware attacks targets US infrastructure for 11 months (source)
- Capital Health attack claimed by LockBit ransomware, risk of data leak (source)
- Toronto Zoo: Ransomware attack had no impact on animal wellbeing (source)
- Paraguay warns of Black Hunt ransomware attacks after Tigo Business breach (source)
- Hackers target Microsoft SQL servers in Mimic ransomware attacks (source)
- There is a Ransomware Armageddon Coming for Us All (source)
- Majorca city Calvià extorted for $11M in ransomware attack (source)
- Ransomware attacks hospitalizing security pros, as one admits suicidal feelings (source)
- TeamViewer abused to breach networks in new ransomware attacks (source)