Victimized consumers made up nearly three-quarters of the requests for help received by CertifID last year.

The plaintiffs allege that the banks did not catch obvious red flags or implement proper safeguards such as requiring two employees to approve each transaction.

The charge carries a total of 30 counts, including two Class C felonies and a maximum sentence under the top charge of 15 years in prison.

HomeTrust Mortgage disclosed customers' names, addresses and Social Security numbers may have been compromised in the incident.

Problems with the closing protection letter are the predominant cause of those errors, a FundingShield report determined.

One man had paid bribes and kickbacks for improper sales of foreclosure properties, and another had engaged in ownership and wire fraud in a loan relief scheme, the courts determined.

Plaintiffs in two similar class action complaints accuse the companies of failing to protect their Social Security numbers and loan information.

The document automation company Ocrolus recently launched a new version of its fraud detection platform. Here's how it works and what other services lenders should consider.

But the shift to a purchase market means issues around employment and income verification should concern originators.

The businesses, like other victims of such incidents, have not identified the culprit nor type of attack.

The companies are the latest mortgage businesses to face class action complaints from consumers impacted by the cyberattacks.

The lender gave a $1.3 million mortgage refinance loan to a borrower based off overstated, fraudulent debt, prosecutors said.

Cybersecurity expenses and threats

A data breach in 2022 costs companies $4.35 million on average, an all-time high according to IBM research.

Borrowers condemned the company's disclosures, which came six months after the incident and omitted details about the hack and subsequent investigation.

The federal class action lawsuit is at least the third similar action within the industry over a cyberattack revelation.

The newly revealed victims were affected by the previously disclosed cyberattack, which went undetected for 41 days between September and December.

The new product is an extension of its FraudGuard offering for the first lien mortgage market.