Massive Data Breach Impacts Nearly 15 Million Mr. Cooper Customers

Nearly 15 million customers were impacted by the cyberattack discovered by Mr. Cooper on Oct. 31. 

According to a filing with Maine's Attorney General, 14.7 million customers were impacted, including 59,917 in that state. 

Initially, Mr. Cooper informed customers of an outage on October 31, on Nov. 5 the company said it "became the target of a cyber security incident and took immediate steps to lock down our systems in order to keep your data safe. As of Nov. 3 at 5 pm CT, our systems remain locked down, and we are working on a resolution as quickly as possible. Many customers were unable to access their accounts or make mortgage payments during this period.

It wasn't until at least a week after the incident that it informed customers their information was exposed as a result. 

As a result of the breach, 13 lawsuits have been filed against Mr. Cooper, alleging the company's failure to adequately protect customer data and communicate transparently with customers. A motion was filed last week in the Texas Northern District to consolidate these lawsuits into a single case, with plaintiffs arguing that consolidation would streamline litigation and save resources.

In response to the breach, Mr. Cooper announced plans to provide affected customers with two years of complimentary identity-protection services, including credit monitoring, offered through Transunion. 

Mr. Cooper has until Jan. 29, 2024 to respond to the consolidated complaint.