More than 1 million Americans have been exposed after mortgage company LoanCare suffered a data breach last month.
According to a filing from the Maine Attorney General, the breach occurred on November 19 and was discovered on December 13.
In total, 1.3 million consumers across the country had their information exposed because of hacking in the system that targeted names and Social Security numbers. Addresses and loan numbers could have been exposed, as well.
Newsweek reached out to LoanCare via email for comment.
While it's unclear what caused the data breach, the company confirmed in its filing that an unauthorized party gained access and took data from its systems.
"We don't yet know how the attackers got in or exactly what they stole," Bullseye Breach author and cybersecurity professional Greg Scott told Newsweek. "These incidents usually grow in scope, and so the odds are good that the 1.3 million number will grow."
What Customers Should Do
For those who did receive a data breach notification from LoanCare or its parent company, Fidelity National Financial, taking steps to protect yourself from fraud or identity theft is vital.
To make sure someone isn't using your information, you should look into credit monitoring or identity protection services. This will allow you to see any sudden and unplanned shifts in credit due to actions out of your control.
"For those affected, staying vigilant is important. Watch for unexpected communications, monitor your credit report, consider fraud alerts and update passwords," Joseph Harisson, CEO of IT Companies Network, told Newsweek.
Hackers who now have access to your Social Security number can easily open new credit accounts and loans as well as potentially drain your existing financial accounts or even get medical services under your insurance.
As a result, consumers affected by the data breach are recommended to immediately contact the Social Security Administration, Internal Revenue Service, Federal Trade Commission and Department of Justice.
"If you're a LoanCare customer, assume that the attackers know everything about you that LoanCare knows about you, and they're selling your information in underground forums around the world," Scott said.
"They might use that information to craft fake communications with you to entice you to do something stupid. So, don't be stupid. Don't fall for phishing."
A free copy of your credit report can be obtained from annualcreditreport.com. LoanCare has also shared it will provide 24 months of identity monitoring services from Kroll.
Data Stolen in 2023
LoanCare is one of many companies that withstood data breaches during 2023.
Customers of electronics company Samsung were also affected in September when the company reported information such as name, contact and demographic information, date of birth, and product registration information had been stolen.
And Snack giant Mondelez, which produces Oreos and Ritz crackers, also dealt with privacy violations after employees' information, including potentially Social Security numbers, were exposed by a law firm it hired.
Roughly 50,000 employees were affected in the cyberattack on Bryan Cave Leighton Paisner LLP's network.
High-profile data breaches are increasingly common in today's digital age, with even tech giants like Microsoft and Meta reporting personal data was previously breached.
Uncommon Knowledge
Newsweek is committed to challenging conventional wisdom and finding connections in the search for common ground.
Newsweek is committed to challenging conventional wisdom and finding connections in the search for common ground.
About the writer
Suzanne Blake is a Newsweek reporter based in New York. Her focus is reporting on consumer and social trends, spanning ... Read more
To read how Newsweek uses AI as a newsroom tool, Click here.
