Emerging Threats

Data leak exposes millions of bank loan and mortgage documents

If you’ve taken out a loan or mortgage from one of several major banks in the past decade, your personal financial information, including Social Security number, may have been exposed.

An independent security researcher found millions of financial and banking documents, representing thousands of loans and mortgages, dating back to 2008 leaking from a server without a password, according to an article published by TechCrunch. The database — reportedly exposed for two weeks — was shut down January 15.

What data was potentially exposed? Here’s a sample:

  • Names
  • Addresses
  • Birth dates
  • Bank and checking account numbers
  • W2 forms
  • Social Security numbers and other financial information.

What are the risks?

If your loan information was accessed, you could face risks. Cybercriminals can use exposed data to commit identity theft and financial fraud, for example. The information can be sold on the dark web and can be used to commit cybercrimes either immediately or years later.

This recent data leak — which has been traced to a company that stores financial data for major financial service companies — underscores two points.

  1. When you share sensitive financial information with anyone, you can’t always be sure it will be stored securely and protected against a data leak or breach.
  2. It’s smart to consider a Cyber Safety solution like Norton 360 with LifeLock, which can help protect your devices, online privacy, and identity

Was my mortgage and loan data part of the leak?

Tens of thousands of people may have had their data exposed, according to TechCrunch. How likely is it that your loan was included in the data?

Statistically, small. For instance, more than 600,000 mortgages originated in the first half of 2018 alone, according to the Consumer Financial Protection Bureau.

Even so, it’s a good idea to practice good Cyber Safety habits. Norton 360 with LifeLock helps protect against cyberthreats like viruses and malware. And if you’re a victim of identity theft, LifeLock can help you restore your good name.

Data leaks may be out of your control, but having Cyber Safety protection can help protect your devices, online privacy, and identity against cyberthreats.

Victim of a data breach? LifeLock monitors for identity theft and threats.

Norton joined forces with LifeLock, we offer a comprehensive digital safety solution that helps protect your devices, connections and identity.


Symantec Corporation, the world’s leading cyber security company, allows organizations, governments, and people to secure their most important data wherever it lives. More than 50 million people and families rely on Symantec’s Norton and LifeLock comprehensive digital safety platform to help protect their personal information, devices, home networks, and identities.

Copyright © 2019 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Norton, Norton by Symantec, LifeLock, and the LockMan Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Google Chrome and Android are trademarks of Google, LLC. Mac, iPhone and iPad are trademarks of Apple Inc. Microsoft and the Windows logo are trademarks of Microsoft Corporation in the United States and/or other countries. The Android robot is reproduced and/or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other company names and product names are registered trademarks or trademarks of each company.