HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
NATIONSTAR MORTGAGE LLC
bd_533f8c10b6714aef · schema v1 · pii pii-v1
Full breach record for NATIONSTAR MORTGAGE LLC →Nationstar Mortgage LLC (dba Mr. Cooper) disclosed a data breach affecting approximately 47,818 Rhode Island residents. Unauthorized access occurred between October 30 and November 1, 2023, resulting in the exfiltration of personal information including names, addresses, Social Security numbers, dates of birth, and bank account numbers. The company shut down systems, engaged forensic experts, and notified law enforcement. Affected individuals were offered 24 months of credit monitoring.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_1649a1b2c61961c4Delaware State AGfiled 2023-12-15Candidate
- bd_57eb457f3eb2112dCalifornia State AGfiled 2023-12-15Verified
- bd_5d5578f4cbaaad52Montana State AGfiled 2023-12-15Verified
- bd_94029d67f539973dMaine State AGfiled 2023-12-15Verified
Show 4 more filings ↓Show fewer ↑up to 98d gap
- bd_bcd8a251801840a2Oregon State AGfiled 2023-12-15Verified
- bd_ec18ec8370ea5376Washington State AGfiled 2023-12-15Verified
- bd_66a3873bc3c9facfNew Hampshire State AGfiled 2023-12-19(4d gap)Verified
- bd_0b70ea800f866612California State AGfiled 2024-03-22(98d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/12/Mr.-Cooper-Individual-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2023
- Raw hash
- c3f9ef5e37048ad93911c62063ee34f8060f5a60bc849d937d51b97145570c7b
Reporting entity
- Name
- NATIONSTAR MORTGAGE LLCnorm: nationstar mortgage
Victim entity
- Name
- NATIONSTAR MORTGAGE LLCnorm: nationstar mortgage
Incident
- Discovered
- Oct 31, 2023
- Materiality determined
- —
- Notification sent
- Dec 1, 2023
- Affected individuals
- 47,818
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- contacted law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.