United States
USA
loanDepot cyberattack interrupts mortgage origination and loan-servicing portals
In early January 2024 an unauthorized party accessed and encrypted loanDepot systems, prompting containment shutdowns. Mortgage origination and servicing systems, including MyloanDepot and customer servicing portals, experienced operational interruptions while the lender restored services; subsequent investigation also identified extensive personal-data exposure.
78
Estimated severity
78 / 100
89
Source reliability
89 / 100
Approximate Date
2024-01-04
Targeted Company
LOANDEPOT
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
ERP or business system disruptionService degradationService unavailability
Affected sectors
Finance & Insurance
Affected departments
Customer ServiceInformation Technology
Attack Profile
Attack types
Data breachUnauthorized access
Attributed threat actors
No information
Sources
Incident Sources
sec.govhttps://www.sec.gov/Archives/edgar/data/1831631/000183163124000004/ldi-20240104.htminvestors.loandepot.comhttps://investors.loandepot.com/news/corporate-and-financial-news/corporate-and-financial-news-details/2024/loanDepot-Provides-Update-on-Cyber-Incident/default.aspxtechcrunch.comhttps://techcrunch.com/2024/01/08/loandepot-outage-suspected-ransomware-attack/