Hackers Breach Intelliloan, Expose SSNs and Driver’s Licenses

Mortgage lender Intelliloan has disclosed a data breach that occurred in March 2025, exposing a wide range of sensitive personal information (PII) belonging to customers.

The company confirmed that hackers gained unauthorized access to internal systems, extracting files containing Social Security numbers, driver’s license details, and financial data.

What Data Was Exposed

According to the breach notification, the compromised data includes:

• Social Security numbers

• Driver’s license numbers

• Home addresses

• Contact information

• Financial details linked to mortgage accounts

As a result, affected customers face heightened risks of identity theft, fraud, and financial exploitation.

Timeline of the Incident

• March 2025 – Hackers breached Intelliloan’s internal systems.

• April–June 2025 – Internal investigation and forensic analysis confirmed customer data exposure.

• September 2025 – Intelliloan began notifying affected individuals as required by U.S. state data breach laws.

The long gap between breach detection and disclosure has already raised concerns about delayed transparency.

The exposed information could allow attackers to:

• Open fraudulent credit accounts

• Apply for loans or benefits under stolen identities

• Conduct targeted phishing attacks using detailed PII

Therefore, the breach significantly increases the potential for long-term financial harm to Intelliloan’s customers.

Company Response

Intelliloan has stated that it is working with cybersecurity experts to strengthen defenses and prevent future incidents. The company is also:

• Offering credit monitoring and identity theft protection services to affected customers

• Advising individuals to review credit reports and bank statements

• Urging stronger account monitoring to catch fraud early

The mortgage and financial services sector remains a prime target for cybercriminals, as lenders store vast amounts of personal and financial data.

This breach follows several similar incidents in 2025, reinforcing concerns that attackers are increasingly focusing on financial institutions as high-value targets.

The Intelliloan breach highlights the ongoing vulnerability of financial institutions and the severe consequences when attackers compromise sensitive data.

For customers, proactive monitoring and fraud protection are essential to reduce potential damage. For lenders, this incident underscores the need for faster detection, quicker disclosure, and stronger cybersecurity investments.

FAQs

Q: What happened in the Intelliloan breach?
A: Hackers accessed Intelliloan systems in March 2025 and stole customer data including SSNs, driver’s licenses, and financial records.

Q: What customer data was exposed?
A: Social Security numbers, driver’s license numbers, addresses, contact information, and mortgage-related financial data.

Q: When did Intelliloan notify customers?
A: Notifications began in September 2025, months after the March 2025 breach was detected.

Q: What should affected customers do?
A: Enroll in credit monitoring, review financial statements, and remain alert for signs of identity theft or fraud.