Evolve Mortgage Services data breach (2025)

Breach window
Sep 17, 2025 → Sep 24, 2025
When the intrusion reportedly occurred, per the linked filings
Breach discoveredletter-grounded
Sep 24, 2025
Reported by SOUTH CAROLINA AG, CALIFORNIA AG, NEW HAMPSHIRE AG filings
36 days
GLOBALClaimed by INC RansomFirst sighting
Posted to leak site Oct 30, 2025bd_fbf00eab4288c89d
Introducing Evolve Mortgage Services, the old company name mrn3.com. We stole more than 20 TB of company data. Including 2TB of databases. This company refused to resolve the issue with us with the security of its customers' data. This company does not care about the safety of its customers. They don't care about leaks and disclosure of your data. We have all the data on all clients of both companies since 2016. SSN numbers, scans of client IDs, home and work addresses, personal, home and work phone numbers, FULL credit history about each client. Personal and confidential PII form information for thousands of citizens of the United States of America.
39 days
🌴South Carolina State AGLeaked → filing gap · 39dlinked via multistate filing link · 95%
Filed Dec 8, 2025bd_6f9eeb071263f1fe
Evolve Mortgage Services, LLC reported unauthorized access to customer data between Sept 17-24, 2025. Suspicious activity was detected on Sept 24. Data involved names combined with other identifiers. No misuse confirmed. Evolve engaged forensic specialists, secured network, replaced hardware, and offered 12 months credit monitoring via Cyberscout.
57 days
🐻California State AGLeaked → filing gap · 3 molinked via operator-confirmed · 100%
Filed Feb 3, 2026bd_ccdda7e983fcf53a
Evolve Mortgage Services, LLC reported unauthorized access to customer information between September 17 and September 24, 2025. The company identified suspicious activity on September 24, 2025, and engaged third-party cybersecurity specialists. Affected data includes names and Social Security numbers. The company secured its network, replaced hardware, and offered 12 months of credit monitoring.
⛰️New Hampshire State AGLeaked → filing gap · 3 mo
Filed Feb 4, 2026bd_5b7f7e627b587553
Evolve Mortgage Services, LLC notified the New Hampshire Attorney General of a data event involving unauthorized access to loan data for 10 NH residents. The breach occurred between September 17 and 24, 2025, and was discovered on September 24, 2025. Affected data included names, SSNs, driver's license numbers, and financial account information. Evolve engaged third-party specialists, secured its network, and offered 12 months of credit monitoring to affected individuals. Notices were sent starting February 3, 2026.
Affected (this filing): 10
44 days
⛰️New Hampshire State AGMost recentLeaked → filing gap · 5 molinked via multistate filing link · 95%
Filed Mar 20, 2026bd_5f615dba869fb538
Evolve Mortgage Services, LLC notified the New Hampshire Attorney General of a data event involving unauthorized access to loan data for 10 NH residents. The breach occurred between September 17 and 24, 2025, and was discovered on September 24, 2025. Affected data included names, SSNs, driver's license numbers, and financial account information. Evolve engaged third-party specialists, secured its network, and offered 12 months of credit monitoring to affected individuals. Notices were sent starting February 3, 2026.

Evolve Mortgage Services

Litigation Timing

Timeline