Cyber attack on AnnieMac Home Mortgage impacted over 170,000 borrowers

New Jersey-based mortgage loan provider AnnieMac Home Mortgage said it suffered a significant data security incident that compromised the sensitive personal information of more than 170,000 individuals.

 

In a data breach notice filed with the Office of Maine Attorney General, American Neighborhood Mortgage Acceptance Company, doing business as AnnieMac Home Mortgage, said that on August 23, it identified suspicious activity in its internal network. An investigation was launched, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“The investigation determined that between August 21, 2024 and August 23, 2024, an unknown actor gained access to systems on our network and viewed and/or copied certain files from these systems,” reads the notice.

 

The compromised data included names and other personal identifiers along with Social Security Numbers. AnnieMac’s filing with the Maine state regulator revealed that at least 171,074 individuals were impacted by the incident.

 

“Upon becoming aware of this event, we promptly commenced an investigation and response that included confirming the security of our systems, investigating to determine the information that may be impacted, and reviewing the contents of relevant data for sensitive information.

 

“As part of our ongoing commitment to the privacy of information in our care, we have implemented additional security measures to further protect against similar incidents occurring in the future. We also reported this event to applicable state and federal government regulators,” the mortgage loans provider said.

 

While the firm did not find evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

 

It has also offered one year of complimentary identity protection and credit monitoring services through CyEx to all affected individuals.