Hacker Strikes Mortgage Firm, Steals Personal Info From 30,453 People, Including Security Numbers, Names and Account Details

Tens of thousands of Americans are now at risk of identity theft and fraud after a major hack at a US mortgage firm.

In a new filing with the Office of the Maine Attorney General, the Virginia-based McLean Mortgage Corporation says it has discovered a significant cybersecurity incident impacting 30,453 people.

“On October 17, 2024, McLean identified suspicious activity within its digital systems. Upon learning of this activity, McLean immediately took steps to secure the network and engaged digital forensics specialists to investigate what happened and help determine whether any sensitive information may have been impacted.”

The company says an internal investigation revealed that an unknown entity gained unauthorized access “to its network and may have downloaded certain files” that contained individuals’ personal information, including first and last name, Social Security numbers, driver’s license numbers and financial account numbers.

The firm says it has reported the data breach to federal law enforcement and provided “written notice of this incident to relevant state regulators, as necessary.”

McLean Mortgage Corporation provides real estate mortgage services as well as advice on purchasing a home, loan first pre-approval and new construction.

The firm says it issued letters of notice to affected individuals while offering a 12-month credit monitoring and identity theft protection service.