The personal data on every current and former customer of Mr. Cooper Group — almost 14.7 million people — was stolen during an October cyberattack, the mortgage servicer said Friday.
“Our forensic review has determined that personal information relating to substantially all of our current and former customers was obtained from our systems during this incident,” EVP and CFO Kurt Johnson said in a filing with the Securities and Exchange Commission.
The Texas-based mortgage company, which currently has more than 4.3 million customers, is one of multiple financial services firms hit by suspected ransomware attacks of late. Fidelity National Financial, one of the nation’s largest title insurance companies, is still assessing the impact of a November cyberattack.
Mr. Cooper shut down multiple systems after it discovered the cyberattack Oct. 31. The company’s response to the hack blocked millions of customers from making payments and processing mortgage transactions, leading the company to set up alternative payment methods online.
The attack compromised the names, addresses, phone numbers, Social Security numbers, dates of birth and bank account numbers of Mr. Cooper’s customers, the company said in a data breach notification filed Friday in Maine.
Vendor expenses related to Mr. Cooper’s response, recovery and identity protection services are now projected to reach $25 million this quarter, the company said in the SEC filing. "Our forensic review, engagement with law enforcement and regulators, and defense of litigation is ongoing."
The company declined to answer questions about the nature of the attack, including any potential extortion demands or payments.
“We take our role as a mortgage company very seriously, and there is nothing more important to us than maintaining our customers’ trust,” Jay Bray, chair and CEO at Mr. Cooper, said in a Friday statement.
“I want you to know how sorry I am for any concern or frustration this may have caused. Making the homeownership journey as smooth as possible is our top priority, and we intend to make this right for our customers,” Bray said.
