MisuseFinancial ServicesFinancePrivilege AbuseEmployee Data InvolvedPIIIdentity (basic)LowContained

LLC dba Shellpoint Mortgage Servicing

bd_6272cb0bb4040996 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 14, 2025

Filed

Sep 16, 2025

To disclose

9 weeks

Affected

4state residents only

Confidence

67%

Full breach record for LLC dba Shellpoint Mortgage Servicing →

NewRez LLC dba Shellpoint Mortgage Servicing disclosed a data security incident on July 14, 2025, where an employee violated company policy by sending company emails and documents to a personal email account. Shellpoint revoked the employee's access, audited outbound traffic, and is offering complimentary identity monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 64 days

Jul 14, 2025

Discovered

Sep 16, 2025

Filed

vs. sector median

+1 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: LLC dba Shellpoint Mortgage Servicing
norm: llc dba shellpoint mortgage servicing

Name: LLC dba Shellpoint Mortgage Servicing
norm: llc dba shellpoint mortgage servicing
Also named: NewRez LLCdba oflegal entity
Shellpoint Mortgage Servicingdba oftrade name
Industry: Financial Servicesllm

Discovered: Jul 14, 2025
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: Internal
Initial access: insider_action

During the incident: Revoked employee’s email and login access
Conducted a full audit of the employee’s outbound email traffic
Offering complimentary identity monitoring services through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/09/Consumer-notification-letter-43.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 16, 2025
Raw hash: c55dd8ea60c01ce7ffbc132941f54f834affb294d9840dff8c7bd69b1206b168

Reporting entityLLC dba Shellpoint Mortgage Servicing

Victim entityLLC dba Shellpoint Mortgage Servicing

Incidentdiscovered Jul 14, 2025

Stated responseRevoked employee’s email and login access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov