Data Breach Exposes Millions of Loan Documents Online – NMP Skip to main content

Data Breach Exposes Millions of Loan Documents Online

Jan 23, 2019
More than 24 million financial and banking documents related to mortgages and other consumer loans were leaked online due to a server security lapse

More than 24 million financial and banking documents related to mortgages and other consumer loans were leaked online due to a server security lapse.
 
According to a report by TechCrunch, the server was running an Elasticsearch database and stored more than a decade of data from some of the nation’s largest banks. The data in question included confidential loan and mortgage contracts and sensitive personal information on borrowers.
 
The information was not password protected, thus opening it to wide exposure for at least two weeks before the server was shut down on January 15 after independent security researcher Bob Diachenko discovered the breach. The leak was traced back to Ascension, a Fort Worth, Texas-based data and analytics company serving the financial services industry, and the data belonged to Citigroup’s now-defunct CitiFinancial subsidiary, HSBC Life Insurance, Wells Fargo, CapitalOne and federal agencies including the Department of Housing and Urban Development.
 
Sandy Campbell, General Counsel at Ascension’s parent company Rocktop Partners, confirmed the breach.
 
“On Jan. 15, this vendor learned of a server configuration error that may have led to exposure of some mortgage-related documents,” he said in a statement. “The vendor immediately shut down the server in question, and we are working with third-party forensics experts to investigate the situation. We are also in regular contact with law enforcement investigators and technology partners as this investigation proceeds.”

 
About the author
Published
Jan 23, 2019
More from
Tech
New AI-Run Mortgage Startup Builds Database Of 224,000 LOs

LenDb.ai is making LO records available to AI assistants, offering a potential new way for borrowers to find originators

Nov 05, 2026
Gateway Taps ICE For Servicing Overhaul After $2.4B MSR Sale

The lender is consolidating servicing operations on ICE's MSP platform after disclosing regulatory capital constraints that have limited its ability to retain MSRs

Nov 05, 2026
Rocket's New Tool Lets Brokers Counter Rival Refi Offers On The Spot

Born from a broker's winning Big Pitch proposal, Quick Counter analyzes competing Loan Estimates and generates alternative offers during borrower calls

Nov 03, 2026
Dark Matter Expands AI Ambitions With House Numbers Acquisition

The deal builds on a series of automation initiatives as the tech provider moves toward AI agents capable of executing tasks throughout the loan lifecycle

Nov 02, 2026
Friday Harbor Expands AI Appraisal Reviews As UAD 3.6 Deadline Nears

The new capability adds more than 350 automated checks as lenders prepare for the November 2 mandate

Oct 27, 2026