MFA FINANCIAL, INC.

MFA Financial, Inc. experienced an external system breach (hacking) on March 10, 2021, which was discovered on August 2, 2021. The breach affected 11 Maine residents, compromising their names and Social Security numbers. The company provided two years of free credit monitoring and identity theft protection services through IDX.

MFA Financial, Inc. suffered a cybersecurity incident in its legacy environment. Between February 12, 2021, and March 10, 2021, an unauthorized party accessed and removed data from a file server. The incident affected personal information of employees, contractors, and mortgage loan owners. Data exposed included names, addresses, Social Security numbers, financial account details, and health insurance IDs. MFA engaged forensic investigators, notified law enforcement, and offered two years of credit monitoring.

MFA Financial, Inc. disclosed a cybersecurity incident in its legacy environment where unauthorized access occurred between Feb 12 and Mar 10, 2021. The attacker accessed and removed personal information (name, address, DOB, SSN) of loan/mortgage owners. MFA engaged forensic investigators, notified law enforcement, and offered 2 years of credit monitoring. Notices were sent on Sep 1, 2021.

MFA Financial, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-02-12 and was reported on 2021-09-01. 101 Indiana residents were affected. 13,006 individuals affected in total.

MFA Financial, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-21. 99 Massachusetts residents were affected. The report records the breach type as electronic.