Community Loan Servicing communityloanservicing.com Community Loan Servicing data breach: what happened and what to do
Attackers accessed Community Loan Servicing files between late October and December 7, 2021, including the names and Social Security numbers of 116,803 borrowers per a state filing. Some people's loan application and servicing details were also in the files. The company offered a year of Kroll monitoring.
View all 13,177 breaches- Breach date
- 27 Oct 2021
- Made public
- 19 Aug 2022
- Affected
- 116,803
- Data exposed
- Names, Social security numbers
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Community Loan Servicing, a mortgage servicer in the Bayview family of companies, reported that an unauthorized person accessed files on its systems. A California attorney general listing gives the window as October 27 to December 7, 2021. Sister servicer Pingora Loan Servicing reported the same incident.
What was exposed
According to a state filing reported by National Mortgage News, the files held the names and Social Security numbers of 116,803 Community Loan Servicing borrowers. For some people they also held loan application, loan modification or servicing information. It was unclear how many had those extra details exposed.
Notices to borrowers began in May 2022, and the attorney general listings in California and Washington record the filing. Affected people were offered a year of credit monitoring, fraud consultation and identity theft restoration through Kroll.
Regulators and lawsuits
In January 2025, Bayview and three affiliated companies agreed to a $20 million settlement with state regulators over the 2021 incident, according to California's financial regulator. Borrowers also sued, and the servicers agreed to a class action settlement reported at $26 million.
What this means for you
A name plus a Social Security number is enough to apply for credit in your name. Loan details add material for convincing phishing, such as a message pretending to be your mortgage servicer. The risk doesn't expire, so a freeze matters more than the monitoring window.
Sources checked: nationalmortgagenews.com, dfpi.ca.gov, consumer.ftc.gov
Last verified against the official page:
What to do if you were in it
- 1
Read your notice letter for what was taken
The letter says which of your details were in the files. If you have a mortgage serviced by Community Loan Servicing, treat messages about your loan with extra care.
- 2
Freeze your credit if a Social Security number or ID was involved
A freeze is free and stops most new accounts in your name. The FTC explains how to place one at Equifax, Experian and TransUnion, each separately.
- 3
Take the free monitoring if you were offered it
The FTC recommends using the credit monitoring or identity protection a company offers after a breach. Use the enrollment code from your letter before it expires.
- 4
Expect phishing that mentions the breach
Scammers send emails, texts and calls that quote a real breach. Don't click links in them. Go to the company's site yourself or call the number on your letter.
- 5
Report misuse
If someone opens an account or files taxes in your name, report it at IdentityTheft.gov to get a recovery plan. You can also check whether your email or phone appears in other breaches with a free Serus scan.
Frequently asked
Was I affected by the Community Loan Servicing breach?
You should have received a notice letter. The company's borrowers, and borrowers whose loans it serviced, were the people involved.
What was exposed?
Names and Social Security numbers per a state filing, plus loan application, modification or servicing details for some people.
Is there a settlement?
Yes. Bayview and affiliates agreed to a $20 million settlement with state regulators in January 2025, and the servicers agreed to a class action settlement reported at $26 million. Check the official claim site for deadlines.
Should I freeze my credit?
Yes, since Social Security numbers were involved. A freeze is free and you place it at each of Equifax, Experian and TransUnion.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
