The pending agreement would resolve claims over a 2021 hack which affected 5.8 million customers of Lakeview, Community, and Pingora Loan Servicing.

A California consumer who applied for a refinance in November says he was unaware his data, including financial details, was shared with advertisers.

The industry vendor SitusAMC has not publicly disclosed how many consumers, nor how many banks and lenders, were impacted in a cyberattack last fall.

The lender claims the ransomware gang behind a breach provided proof it deleted compromised customer information, and it hasn't appeared on the dark web since.

A former employee cited a ransomware gang's claim in October that it stole 20 terabytes of sensitive customer information from the industry vendor.

The wholesale lender fell victim to a data incursion two years ago in a months-long period marked by several high-profile cybersecurity incidents.

The Troy, Michigan-based lender and servicer faces at least seven lawsuits over a hack in June allegedly perpetrated by a known ransomware gang.

The vendor, SitusAMC Group Holdings, LP, said in a statement Saturday that someone compromised its systems and took client data including "accounting records and legal agreements." 

A "spike in unusual traffic" caused service degradation for the infrastructure giant, disrupting digital banking for customers.

The bank is adding trusted contacts, specialized teams and new tech against scams, but consumer advocates say reimbursement is the key missing piece.

Bayview Asset Management and three affiliates reached an agreement in a data breach lawsuit for an incident that impacted 5.8 million customers.

The agreement, if approved by a federal judge, would end litigation over two distinct cybersecurity incidents in 2021 which affected over 2 million customers.

The Consumer Financial Protection Bureau has seen a rapid drop in the effectiveness of its cybersecurity program, according to a new report from the Fed's Office of Inspector General.

Class action lawsuits accuse the lender and servicer of negligence over the incident which compromised the sensitive data of tens of thousands of customers.

A critical U.S. cybersecurity law sunsets Sept. 30, and banks say losing it would weaken defenses against hackers.

The Federal Housing Administration also is removing personally identifiable information from the electronic data set and improving cybersecurity more broadly.

The database contained internal user emails, KPI report templates and other internal data, but no personal or financial customer data.

The incident appears connected to recent social engineering campaigns, including attacks tied to Salesforce.

The need for an insurance policy that covers AI risks is growing with the adoption of AI technologies.

With federal oversight easing, Rhode Island joins states pushing cybersecurity laws for finance companies not covered by federal bank regulators.