On or about October 31, 2023, Nationstar Mortgage LLC, doing business as Mr. Cooper, became aware of suspicious activity involving certain network systems. According to the Notice of Data Breach, Mr. Cooper promptly took steps to secure its network, shut down affected systems, initiated an internal investigation, engaged third‑party cybersecurity experts, and contacted law enforcement to determine what occurred.
Following the initial investigation, Mr. Cooper confirmed that certain customer information may have been impacted. The forensic review later determined that files were accessed or taken without authorization between October 30, 2023, and November 1, 2023. During that time, files containing sensitive personal information were obtained by an unauthorized party.
After identifying the affected files, Mr. Cooper worked to resecure its network environment and strengthen its overall security posture. The company reported that it enhanced system safeguards, changed account passwords, restored services, and took additional measures designed to reduce the risk of similar incidents in the future.
Mr. Cooper is one of the largest mortgage servicing companies in the United States. Nationstar Mortgage LLC services home loans under the Mr. Cooper brand, as well as through affiliated or “sister” brands, including RightPath Servicing, Rushmore Servicing, Greenlight Financial Services, and Champion Mortgage. Individuals may be affected if their mortgage was previously acquired, serviced, or partnered with Mr. Cooper or one of its related entities, or if they previously applied for a home loan through the company.
Mr. Cooper also stated that, at the time of notification, it had not received reports of identity theft or fraud resulting from the incident. However, the investigation confirmed that unauthorized access to certain personal and financial data occurred, which may place affected individuals at ongoing risk.
Individuals whose information may have been involved began receiving written notification letters in December 2023. If you received a Notice of Data Breach from Mr. Cooper, it confirms that your personal and/or financial information may have been impacted by this security incident.
As part of its response, Mr. Cooper is offering affected individuals complimentary credit monitoring, credit reports, credit scores, and proactive fraud assistance for 24 months through Cyberscout / IdentityForce, provided individuals enroll by the stated deadline in their notification letter
What information is involved in the Mr. Cooper Data Breach?
Compromised information may include:
First Name
Last Name
Mailing Address
Phone Number
Social Security Number
Date of Birth
Bank Account Number
The specific data elements involved vary by individual and are detailed in each notification letter sent by Mr. Cooper.
Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name, Social Security number, and financial details. Companies that manage mortgage and financial information are legally required to safeguard this data. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, tax fraud, or unauthorized account activity.
Much of the information involved in this incident—including Social Security numbers and bank account information—represents high‑risk financial data. When this type of data is compromised, it may be misused for fraudulent transactions, account takeovers, or other improper purposes, often long after the initial breach.
If your information was involved in this incident, it is important to remain vigilant. Impacted individuals are encouraged to carefully review financial statements, credit reports, and banking activity for any suspicious or unfamiliar charges. Mr. Cooper also advises reviewing the guidance provided with the notification letter, including steps related to credit monitoring, fraud alerts, credit freezes, and identity restoration services.
Consumers may have legal rights when companies that manage sensitive personal and financial data fail to adequately safeguard that information. These rights vary by state and may depend on the nature of the information exposed and the circumstances surrounding the breach.
If you received a Notice of Data Breach related to Mr. Cooper / Nationstar Mortgage LLC, your personal and potentially financial information may be at risk.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.