loanDepot, Inc.
Jan 2024 · Graded Verified · Financial Services · Government record
Incident summary
loanDepot, Inc.Jan 2024
$24.6M
Total reported cost
Total incident cost
loanDepot ran origination, servicing, and its customer portal on ground flat enough that one phished login could encrypt the whole thing and reach roughly 16.6 million people's Social Security numbers, financial accounts, and loan files. ALPHV/BlackCat claimed the intrusion and demanded $10 million; the company refused, then spent three weeks and about $27 million rebuilding what a single email had unlocked. A network with no interior walls is not breached so much as opened.
Losses on the record
See the full accounting
Total incident cost · realized$24.6M · V
Direct expense · realized$1.8M · V
Source:
Shown individually, never summed across measures.
Verified: the linked document states this figure.
SEC 8-K, Item 8.01
Initial attack type phishing or social engineering inferred · Impact ransomware confirmed + data theft · Actor ALPHV/BlackCat
Quantified 380 days after disclosure.
What the company has said it cost
The company’s own disclosed figure, as it changed over time. Some of the losses on the record are this same figure, typed and categorized; the rest carry their own sources.
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.