Where does the Newrez LLC case file come from?

Every entry is taken from the breach report Newrez LLC lodged with the Massachusetts Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Newrez LLC Data Breach

This file collects the dated facts on record for the Newrez LLC incident. The state report is dated September 17, 2025.

Timeline

September 17, 2025Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: September 17, 2025
Receiving office: Massachusetts Attorney General

Case notes

Newrez LLC, a significant non-bank residential mortgage lender and servicer, reported a data security incident to the Massachusetts Attorney General on September 17, 2025. The company stated that its digital infrastructure was compromised, leading to potential exposure of personal information. An investigation into the full scope of the incident is ongoing.

As a mortgage operation, Newrez LLC routinely handles substantial volumes of personal information necessary for loan applications, credit evaluations, and servicing agreements. This includes data foundational to identity and financial histories, making the security of this information critical for consumers.

The breach, described as an unauthorized compromise, could involve unauthorized access to internal databases, compromise of vendor systems, or exploitation of network vulnerabilities. Such incidents typically result in unauthorized access to and potential exfiltration of various types of stored personal information.

Since the specific categories of data involved have not been detailed, individuals who receive direct notification from Newrez LLC should review its contents carefully for information pertinent to their situation. Widely recommended protective steps include monitoring accounts and credit reports for unusual activity and remaining vigilant against potential fraud.

This information is derived from public filings with regulatory authorities, documenting the reported security incident.

Questions about this case file

Where does the Newrez LLC case file come from?: Every entry is taken from the breach report Newrez LLC lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Named in the Newrez LLC breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files