HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
NATIONSTAR MORTGAGE LLC
bd_66a3873bc3c9facf · schema v1 · pii pii-v1
Full breach record for NATIONSTAR MORTGAGE LLC →Nationstar Mortgage LLC (dba Mr. Cooper) reported unauthorized access to network systems between Oct 30 and Nov 1, 2023, detected on Oct 31, 2023. Files containing personal information were obtained. 77,568 NH residents affected. Response included system shutdown, forensic investigation, law enforcement notification, and 24-month credit monitoring for affected individuals.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_1649a1b2c61961c4Delaware State AGfiled 2023-12-15(4d gap)Candidate
- bd_533f8c10b6714aefDelaware State AGfiled 2023-12-15(4d gap)Verified
- bd_57eb457f3eb2112dCalifornia State AGfiled 2023-12-15(4d gap)Verified
- bd_5d5578f4cbaaad52Montana State AGfiled 2023-12-15(4d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 94d gap
- bd_94029d67f539973dMaine State AGfiled 2023-12-15(4d gap)Verified
- bd_bcd8a251801840a2Oregon State AGfiled 2023-12-15(4d gap)Verified
- bd_ec18ec8370ea5376Washington State AGfiled 2023-12-15(4d gap)Verified
- bd_0b70ea800f866612California State AGfiled 2024-03-22(94d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/nationstar-mortgage-dba-mr-cooper-20231219.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2023
- Raw hash
- 5c16880f88a2beddc6b8b154c789d073a34489ed3e3b2a6be0c1bf619cc3a7f6
Reporting entity
- Name
- NATIONSTAR MORTGAGE LLCnorm: nationstar mortgage
Victim entity
- Name
- NATIONSTAR MORTGAGE LLCnorm: nationstar mortgage
Incident
- Discovered
- Oct 31, 2023
- Materiality determined
- —
- Notification sent
- Dec 15, 2023
- Affected individuals
- 77,568
- Data types
- PIIIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney GeneralContacted law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.