Data Breach Exposes Millions of Loan Documents Online – NMP Skip to main content

Data Breach Exposes Millions of Loan Documents Online

Jan 23, 2019
More than 24 million financial and banking documents related to mortgages and other consumer loans were leaked online due to a server security lapse

More than 24 million financial and banking documents related to mortgages and other consumer loans were leaked online due to a server security lapse.
 
According to a report by TechCrunch, the server was running an Elasticsearch database and stored more than a decade of data from some of the nation’s largest banks. The data in question included confidential loan and mortgage contracts and sensitive personal information on borrowers.
 
The information was not password protected, thus opening it to wide exposure for at least two weeks before the server was shut down on January 15 after independent security researcher Bob Diachenko discovered the breach. The leak was traced back to Ascension, a Fort Worth, Texas-based data and analytics company serving the financial services industry, and the data belonged to Citigroup’s now-defunct CitiFinancial subsidiary, HSBC Life Insurance, Wells Fargo, CapitalOne and federal agencies including the Department of Housing and Urban Development.
 
Sandy Campbell, General Counsel at Ascension’s parent company Rocktop Partners, confirmed the breach.
 
“On Jan. 15, this vendor learned of a server configuration error that may have led to exposure of some mortgage-related documents,” he said in a statement. “The vendor immediately shut down the server in question, and we are working with third-party forensics experts to investigate the situation. We are also in regular contact with law enforcement investigators and technology partners as this investigation proceeds.”

 
About the author
Published
Jan 23, 2019
More from
Tech
Dark Matter Moves Document Checks To The Point Of Sale

New Aiva Intelligence capability gives borrowers immediate feedback on uploaded documents, aiming to resolve problems before they become downstream conditions

Aug 24, 2026
New American Funding Extends AI Push To Borrower Calls

The lender is adding customer-facing agents across originations and its $73 billion servicing portfolio, but has not disclosed which transactions will be automated or when deployment begins

Aug 20, 2026
The Hidden Risk Inside Mortgage Tech Consolidation And How Lenders Can Stay In Control

platforms consolidate and vendors gain leverage, the lenders who stay disciplined about data, adoption, and exit terms will be the ones who keep control of their own tech stack

Aug 19, 2026
The Race To Reinvent Mortgage Origination

Automation promises to strip away administrative work while raising expectations for production, conversion, and human advice

Aug 19, 2026
Clear Capital Clears GSE Test For New Property Data Standard

The verification gives lenders another option for inspection-based appraisal alternatives, but it covers only one piece of a much broader collateral-readiness challenge

Aug 19, 2026
Checkr Buys Truv To Move Mortgage Verification Beyond Documents

The acquisition adds consumer-permissioned payroll and banking data to Checkr’s mortgage platform while lenders confront increasingly convincing fabricated financial records

Aug 19, 2026