Cyberattack takes down one of the largest mortgage lenders in the US

ransomware avast
(Image credit: Avast)

Mr. Cooper, a major mortgage lender in the United States, has suffered a serious cyberattack which forced it to pull some of its systems and endpoints offline. As a result, customers were unable to pay their mortgages or loans.

In an announcement published on the Mr. Cooper website, it was said that the company became aware of the attack on October 31, and took “immediate action” to secure customer data. That action included locking some systems down, which still remain locked at press time. 

While the company did not specifically state this was a ransomware attack, companies that are forced to shut some systems down usually tackle that particular threat. It did say that it is “actively investigating” if any data has been compromised.

No penalties

Soon after, the company told BleepingComputer that it “began notifying customers about the incident”, suggesting that some data theft might have occurred. In any case, customers should be extra careful when receiving emails or text messages from anyone claiming to be a Mr. Cooper employee. 

As its services are currently offline, and people are unable to meet their obligations, some are worried that they will be penalized for being late with their payments.

“Rest assured, you will not incur any fees, penalties, or negative credit reporting related to late payments as we work to fix this issue,” Mr. Cooper’s announcement further stated.

Right now, there seems to be no other way to process the payments. “If you use ACH, your payment will be processed as soon as our systems are operational and you will receive a notification,” the company concludes. “You do not need to do anything.”

Mr. Cooper, previously known as Nationstar Mortgage LLC, is a mortgage lending company with more than four million customers. It employs some 9,000 people and services loans of $937 billion.

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Red padlock open on electric circuits network dark red background
Newspaper printing across US hit after Lee Enterprises says “cybersecurity event” disrupted operations
Russian flag on a laptop
Major Russian IT service provider hit with cyberattack
Ransomware
Lee Enterprises blames cyberattack for encrypting critical systems as US newspaper outages drag on
Insurance
Globe Life data breach may have affected 850,000 more patients than previously thought
sewage water treatment
Southern Water denies claims it offered $750,000 ransom to ransomware hackers
security
Ransomware gangs allegedly hit two major US healthcare firms, 300,000 patients have data stolen
Latest in Security
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS)
This top WordPress plugin could be hiding a worrying security flaw, so be on your guard
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Veeam urges users to patch security issues which could allow backup hacks
UK Prime Minister Sir Kier Starmer
The UK releases timeline for migration to post-quantum cryptography
Representational image depecting cybersecurity protection
Cisco smart licensing system sees critical security flaws exploited
Latest in News
L-mount alliance
Sirui joins L-Mount Alliance to deliver its superb budget lenses for Leica, DJI, Sigma and Panasonic cameras
Security padlock and circuit board to protect data
Trust in digital services around the world sees a massive drop as security worries continue
Samuel and Romy standing very close together in A24's Babygirl movie
Everything new on Max in April 2025, including A24's Babygirl and The Last of Us season 2
An AMD Radeon RX 9070 XT made by Sapphire on a table with its retail packaging
AMD’s secret weapon against Nvidia seems to be stock – way more RX 9070 GPUs are rumored to be hitting shelves than RTX 5000 models
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
Seth Milchick and Kier Eagan's animatronic speaking in Severance season 2 episode 10
Apple TV+ announces Severance has been renewed for season 3 after that devastating finale