SN Servicing data breach: what happened and what to do
SN Servicing Corporation, a mortgage servicer, told regulators that an unauthorized party accessed its network around October 14 to 15, 2020. The Maine filing counts 20,155 people affected. Names, dates of birth, Social Security numbers and loan details may have been exposed.
View all 13,177 breaches- Breach date
- 14 Oct 2020
- Made public
- 15 Jan 2021
- Affected
- 20,155
- Data exposed
- Names, Dates of birth, Social security numbers, Loan information
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
SN Servicing Corporation services mortgage loans. Its notice letters, dated January 15, 2021, say the company found unauthorized access to its network on or about October 15, 2020. The Maine Attorney General's filing gives the breach date as October 14, 2020 and describes a ransomware incident. It lists 20,155 people affected in total, including 31 Maine residents.
Sources checked: maine.gov, consumer.sc.gov, consumer.ftc.gov
Last verified against the official page:
What was exposed
The letters say the information may have included name, contact information, date of birth, Social Security number and loan or borrower information.
That is a full identity kit. A Social Security number with a date of birth is what thieves need to open credit or file a fake tax return in your name. Loan details also give scammers material for convincing calls that claim to be from your lender.
The company's response
SN Servicing's letters say it arranged credit monitoring for the people affected. Check your own letter for the sign-up code and the deadline.
Was your data in it?
The company wrote to the people whose information may have been involved. If you have or had a mortgage serviced by SN Servicing and got a letter, treat your Social Security number as exposed.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A Social Security number and date of birth are enough to open credit in your name. A freeze is free and blocks new accounts. Follow the FTC's steps for Equifax, Experian and TransUnion.
- 2
Use the credit monitoring in your letter
If you got a notice with a sign-up code, use it. The FTC recommends taking free credit monitoring when it's offered.
- 3
Review your credit reports and statements
Check your reports for accounts you don't recognize and your loan statements for odd activity. If you find identity theft, report it and get a recovery plan at IdentityTheft.gov.
- 4
Verify anyone who contacts you about your loan
Scammers can quote real loan details. Don't act on a call or text about your mortgage. Hang up and call the number on your statement.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number, and what else is exposed about you online.
Official filings
- California Attorney General , filed 29 Jan 2021
Timeline
-
The breach happened
-
The company made it public
-
Reported to the California Attorney General
Frequently asked
Was I affected by the SN Servicing breach?
The company wrote to the people whose information may have been involved. The Maine filing counts 20,155 in total. If you got a letter, you were on the list.
What was exposed?
The letters list name, contact information, date of birth, Social Security number and loan or borrower information.
Should I change my password?
The notice doesn't list passwords. A credit freeze matters more here, because Social Security numbers were involved.
Is there a settlement?
The sources used for this page don't mention a settlement.
Sources
- maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/55f52f52-d120-4bb0-9eef-7c5b4ad233f1.shtml
- consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/SNServicingCorp.pdf
- consumer.ftc.gov/consumer-alerts/2022/10/have-you-been-affected-data-breach-read
- consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
- identitytheft.gov/databreach
Something wrong or out of date? Tell us and we'll re-check it.