Now Hacked
EN-GB
Ransomware

loanDepot ransomware exposes personal data of about 16.9 million people

First reported · Last reported · 11 related reports

US mortgage lender loanDepot was hit by a ransomware attack in January 2024 that disrupted its IT systems and payment portal. Names, contact details, dates of birth, Social Security numbers, financial account numbers and other data of about 16.9 million people were stolen. ALPHV claimed responsibility for the attack, and in March 2025 a $25 million class action settlement was reached.

Key facts

Affected organisation
loanDepot
Incident type
Ransomware
Occurred / detected
Not confirmed
Scale of damage
Names, contact details, dates of birth, Social Security numbers, financial account numbers and more of about 16.9 million people
Cause / method
Theft of personal data via ransomware attack
Location
United States

If your data was exposed

Exposed dataNamePhone numberDate of birthNational ID numberBank account

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. It was reported that a cyber-attack had affected loanDepot's IT systems and payment portal.
  2. Potential legal action over the data breach was reviewed.
  3. ALPHV claimed responsibility for the loanDepot ransomware attack.
  4. loanDepot confirmed that personal data of about 16.9 million people had been stolen.
  5. A $25 million settlement was reached in the data breach class action.

11 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.