Summary
- Environment: Mortgage origination, underwriting and closing files
- Operational impact: Affected systems taken offline during containment
- Financial impact: No incident cost established in the reviewed evidence
- Record status: Developing record. Reviewed October 16, 2026; updated as evidence emerges.
What happened
MLD Mortgage, doing business as The Money Store, detected unusual activity on September 9, 2026. Its investigation found that an unauthorized party accessed and acquired information from part of its environment beginning around September 8. [1]
Impact
Affected files included residential mortgage origination, underwriting and closing documents. The letter also says dependent names and Social Security numbers may have been involved where borrowers supplied supporting tax documents. [1]
The public template leaves the recipient-specific data categories blank and gives no affected-person total.
Timeline
Unusual activity detected
MLD detected activity in its IT environment. See the source notice.
[1]Notification letter dated
MLD issued the reviewed individual-notification letter. See the source notice.
[1]Briefing updated
This briefing was last reviewed and updated on October 16, 2026.
Threat Group & Attack Vector
The unauthorized party entered through a remote monitoring and management platform used by a third-party service provider supporting MLD. [1]
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.