Newcourse Communications newcoursecc.com Newcourse Communications data breach: what happened and what to do
Newcourse Communications, a print and mail vendor for banks and mortgage servicers, had its network accessed without authorization between April 27 and May 3, 2022. Exposed data varied by letter: names, addresses and loan numbers, and for some people Social Security numbers.
View all 13,177 breaches- Breach date
- 27 Apr 2022
- Data exposed
- Names, Physical addresses
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Newcourse Communications prints and mails statements and borrower letters for financial institutions. According to notice letters filed with state attorneys general, someone accessed its network without authorization between April 27 and May 3, 2022. Newcourse says it hired outside cybersecurity experts to investigate.
Because Newcourse works for other companies, people heard about the breach from their own bank or mortgage servicer, such as HomeStreet Bank or First United Bank, rather than from Newcourse.
Sources checked: mass.gov, oag.ca.gov, consumer.ftc.gov
Last verified against the official page:
What was exposed
The letters differ by client. Some list full names, addresses and loan numbers, with only the last four digits of the Social Security number. Others list Social Security numbers as the data involved. Your letter says which applies to you.
A Social Security number with a name and address is enough to attempt identity theft: opening credit, filing a fake tax return or taking over accounts. Loan numbers and addresses help scammers pose as your lender.
What Newcourse did
The letters offer 24 months of credit monitoring and identity theft recovery through IDX, with a $1,000,000 reimbursement insurance policy. Enrollment deadlines are in the letter.
What it means for you
If you got a letter, enroll in the offered monitoring and read which data it names. If your full Social Security number was listed, freeze your credit.
What to do if you were in it
- 1
Read your notice letter
It says exactly which data of yours was involved and how to enroll in the free monitoring. Enroll before the deadline.
- 2
Freeze your credit if your Social Security number was listed
A freeze is free and blocks most new accounts in your name. The FTC explains how to freeze at Equifax, Experian and TransUnion.
- 3
Watch for fake lender messages
Scammers can use loan details to pose as your mortgage servicer. Don't click links or call numbers in unexpected messages; use the number on your statement.
- 4
Check your loan and bank statements
Look for activity you don't recognize and review your credit reports at annualcreditreport.com.
- 5
Report misuse
If someone uses your details, report it at IdentityTheft.gov. To see which other breaches include your email or phone, run a free Serus scan.
Official filings
- Washington Attorney General , filed 10 Sept 2022 : 13,214 people
Timeline
-
The breach happened
-
Reported to the Washington Attorney General
Frequently asked
Was I affected by the Newcourse Communications breach?
Your bank or mortgage servicer should have sent a letter if you were. If you had a loan or account with a Newcourse client in 2022 and got no letter, ask the institution.
Was my full Social Security number exposed?
It depends on the letter. Some list only the last four digits, others list Social Security numbers. Your own letter is the answer.
Should I change my password?
No password exposure is listed. Focus on credit monitoring and a freeze.
Sources
- mass.gov/doc/assigned-data-breach-number-28495-newcourse-communications/download
- oag.ca.gov/system/files/Newcourse%20Communications%20-%20Homestreet%20Bank%20-%20Final%20Notice%20Letter%20Version%20[redacted]%20(10635980x7AB84).pdf
- oag.ca.gov/privacy/databreach/list
- consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
- identitytheft.gov/databreach
Something wrong or out of date? Tell us and we'll re-check it.
