Keyboard robbers steal 171K customers' data from AnnieMac mortgage house

A major US mortgage lender has told customers looking to make the biggest financial transaction of their lives that an intruder broke into its systems and saw data belonging to 171,000 of them. American Neighborhood Mortgage Acceptance Company, which trades as AnnieMac Home Mortgage, said between August 21 and 23, an unknown …

[Korev]

Since when did a radio DJ sell mortgages?

[mebh]

"among"

Do they get points for honesty?

"... among AnnieMac's highest priorities..." (emphasis mine)

[An_Old_Dog]

Re: "among"

Also among AnnieMac's "highest priorities" is changing the litterbox of Mittens, the company cat.

But really, nobody wants to do it, because that litterbox gets rank.

[Anonymous Coward]

intruder's motive?

I wonder if:

The intruder just stumbled on an open door and was curious

The intruder only wanted data, to demand a ransom not to release it (no evidence of ransom demand)

The intruder only wanted data, for a scheme they have planned

The intruder's ransomware app failed to start

The network had security software that stopped the ransomware from executing (org would have bragged about this)

If it was planned, you would expect some ransomware as well. Is there anyone left in the US whose SSN hasn't been misplaced?

[oreosRnice]

Re: intruder's motive?

Nope.

I just assume every single citizen at this point has had their entire life’s data listed in a file on the “dark web”.

We have had in the last, what, 2 years. Had major mobile carriers’ customer data leaked, multiple mortgage companies, multiple banks, and a couple of cities.

And every single time we hear the same BS “we take data protection seriously”. If a company meant that, it would’ve never happened. Especially when over half of these breaches come from IT complacency. Either someone had a shitty password or an unpatched vulnerability or some other dumb shit.

Only to get the same 12 months of credit monitoring from an unheard of company. The government then barely slaps them in the wrist. Which I assume they’ve been hacked and refuse to admit it as well.

[picturethis]

Re: intruder's motive?

You forgot to include the almost monthly new hack of every major health insurance firm in the US.

And I would agree, there is no one left in (at least) the US that hasn't had enough personal information stolen to a allow a complete hijack of their identity/life.