HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained

MR. COOPER GROUP INC.

bd_b07179e304b6e55f · schema v1 · pii pii-v1

Full breach record for MR. COOPER GROUP INC. →

Mr. Cooper (Nationstar Mortgage LLC) disclosed a data breach occurring between October 30 and November 1, 2023, involving unauthorized access to systems containing personal information of approximately 47,818 Rhode Island residents. The incident involved the exfiltration of names, addresses, SSNs, dates of birth, and bank account numbers. Mr. Cooper shut down systems, engaged cybersecurity experts, and notified law enforcement. Affected individuals were offered 24 months of credit monitoring and fraud assistance.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed47,818 affectedView incident

Source provenance

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2024/04/MrCooperIndividualNoticeProofRedacted.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 26, 2024
Raw hash: 8ed91e84c65ff7d3df6d69a69e1a79b7ab51c827cbfa78d94c72c2843cfebb4d

Reporting entity

Name: NATIONSTAR MORTGAGE LLC
norm: nationstar mortgage

Victim entity

Name: MR. COOPER GROUP INC.
norm: mr cooper

Incident

Discovered: Oct 31, 2023
Materiality determined: —
Notification sent: Dec 31, 2023
Affected individuals: 47,818
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: contacted law enforcement
Initial access: valid_credentials

Compliance

Time to disclose: 21 weeks(147 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.