Data Breach Exposes Millions of Loan Documents Online

Jan 23, 2019

More than 24 million financial and banking documents related to mortgages and other consumer loans were leaked online due to a server security lapse.

According to a report by TechCrunch, the server was running an Elasticsearch database and stored more than a decade of data from some of the nation’s largest banks. The data in question included confidential loan and mortgage contracts and sensitive personal information on borrowers.

The information was not password protected, thus opening it to wide exposure for at least two weeks before the server was shut down on January 15 after independent security researcher Bob Diachenko discovered the breach. The leak was traced back to Ascension, a Fort Worth, Texas-based data and analytics company serving the financial services industry, and the data belonged to Citigroup’s now-defunct CitiFinancial subsidiary, HSBC Life Insurance, Wells Fargo, CapitalOne and federal agencies including the Department of Housing and Urban Development.

Sandy Campbell, General Counsel at Ascension’s parent company Rocktop Partners, confirmed the breach.

“On Jan. 15, this vendor learned of a server configuration error that may have led to exposure of some mortgage-related documents,” he said in a statement. “The vendor immediately shut down the server in question, and we are working with third-party forensics experts to investigate the situation. We are also in regular contact with law enforcement investigators and technology partners as this investigation proceeds.”

About the author

Phil Hall

Link copied

Published

Jan 23, 2019

Courts

Kortas Secures Sole Ownership Of NEXA Lending

The settlement ends a multiyear legal battle between the co-founders of NEXA Lending

NEXA Lending CEO Mike Kortas has emerged as the sole owner of the company following a settlement with co-founder and former business partner Mat Grella, ending years of litigation over their respective ownership interests and the size of Grella's buyout.The settlement ends a...

Regulation and Compliance

AD Mortgage Warns Condo Eligibility Changes Could Restrict Conventional Financing

Wholesale lender cites internal loan data to urge regulators to monitor whether new condominium eligibility standards reduce access to conventional financing

Four months after new Enterprise condominium eligibility standards raised concerns among lenders across the industry, AD Mortgage is taking those concerns directly to federal regulators.The wholesale lender announced the launch of a Public Policy Initiative last week, using ...

Sep

Dallas, TX

More from

Tech

TransUnion Brings Alternative Credit Signals To Mortgage Underwriting

New borrower insights help lenders evaluate applicants earlier in the origination process at no additional cost

Tech

Jul 20, 2026

Solidifi Clears FHA Certification For UAD 3.6 Integration

The appraisal management company says it is the first to complete certification for FHA’s modernized EAD platform, giving lender clients an early path toward implementation

Regulation and Compliance

Jul 16, 2026

Carrington Deploys AI Agents For Servicing And Collections

Kastle’s technology will autonomously handle borrower interactions, assist contact-center employees and review every customer exchange for quality control

Tech

Jul 16, 2026

Dark Matter Adds LodeStar Closing-Cost Tools To Empower LOS

LodeStar becomes the first integration partner to connect through Dark Matter’s new Developer Platform

Tech

Jul 16, 2026

MISMO Says eNotes Can Save Lenders Up To $300 Per Loan

New Candidate Recommendation white paper offers a roadmap for eClosing adoption, highlighting faster liquidity, fewer post-closing defects, and operational savings

Tech

Jul 13, 2026

Cornerstone First Mortgage Adopts nCino POS To Fuel Growth

Fast-growing lender says the platform will help standardize the borrower experience while supporting dozens of local branch brands and expanding digital capabilities

Tech

Jul 10, 2026

Popular