Mr. Cooper reports personal data of substantially all customers obtained in an October 2023 incident

Mr. Cooper Group, one of the largest US mortgage servicers, disclosed on November 2, 2023 that it had determined on October 31 that an unauthorized third party had accessed some of its technology systems. It shut down systems as a precaution; its final amendment said personal information on substantially all of its current and former customers had been obtained.

Original filing

The company did not expect a material adverse effect.

November 9 amendment

Servicing restarted on November 4. Because systems were inaccessible from November 1 to 4, many customers could not make payments or reach their accounts, and the company said it would waive late fees for that period. It estimated $5 million to $10 million of added vendor costs in the fourth quarter.

December 15 amendment

Mr. Cooper offered two years of identity protection and raised its fourth-quarter vendor expense estimate to $25 million, including that cost.

Not given

The filings do not give a customer count or describe how the third party got in.