Virginia mortgage firm hack exposes thousands of customers

An attacker breached the McLean Mortgage Corporation, stealing sensitive customer data, including financial account information.

McLean sent out breach notification letters to thousands whose data may have been exposed in a breach from last year. According to the company, McLean noticed something was not right with its systems in late October 2024.

“Upon learning of this activity, McLean immediately took steps to secure the network and engaged digital forensics specialists to investigate what happened and help determine whether any sensitive information may have been impacted,” reads the notification.

According to information the company submitted to the Maine Attorney General’s Office, over 30,000 individuals were impacted in the cyberattack.

The incident prompted an investigation, which was concluded in May 2025, with the company learning that personal details of thousands were exposed. The breach notification indicates the attackers may have accessed:

• First and last names
• Social Security numbers (SSNs)
• Driver’s license numbers
• Financial account numbers

Skilled attackers could utilize stolen details for identity theft, which could enable them to submit fraudulent loan applications. Meanwhile, leaked SSNs and driver’s license numbers allow attackers to bypass authentication protections as both are common ways to confirm an individual’s identity.

McLean said it will provide potential victims with complimentary credit monitoring and identity theft protection tools.