- Status
- Confirmed breach
- People affected
- 16,924,071 Oregon residents (one state’s count; the total can be higher)
- Reported
- 8 January 2024
- Across the state notices
- at least 17,426,584 people (Oregon and Washington: each state counts only its own residents)
- Breach began
- 3 January 2024
- Time to tell
- 5 days (the median in California’s notices over the last year: 154 days)
What was exposed
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
Sources
- Official notice · 8 January 2024US Securities and Exchange Commission (8-K Item 8.01)Form 8-K Item 8.01: cybersecurity incident disclosed by loanDepot, Inc.
- Official notice · 22 January 2024US Securities and Exchange Commission (8-K Item 8.01)Form 8-K/A Item 8.01: cybersecurity incident disclosed by loanDepot, Inc.
- Official notice · 15 February 2024 · 502,513 Washington residentsWashington Attorney General
- Official notice · 23 February 2024 · 16,924,071 Oregon residentsOregon Department of Justice
- Official notice · 23 February 2024Iowa Attorney GeneralLoanDepot.com: breach notice to the Iowa Attorney General
Official notices are read by code from the regulator’s own register. More notices to Oregon, Iowa, SEC filings, Washington. · Corrections and changes