loanDepot discloses cyber incident in SEC 8-K filing exhibit
loanDepot discloses a Cybersecurity Incident in an SEC filing exhibit; cause and scope are not confirmed, so watch its official notices.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- Not confirmed. The source does not say whether any vulnerability was exploited or who was responsible.
What happened
According to a loanDepot, Inc. exhibit (EX-99.2, a third-quarter 2026 investor presentation dated November 9, 2026) published on SEC EDGAR, the company refers to a “Cybersecurity Incident” SEC EDGAR. The story was logged under the headline “loanDepot, Inc. discloses a cyber incident in an SEC Form 8-K filing” on 2026-11-09 SEC EDGAR.
The presentation’s footnotes say the company counts expenses “directly related to the Cybersecurity Incident, net of actual insurance recoveries.” According to the filing, these include costs to investigate and remediate the incident, customer notifications and identity protection, professional fees including legal expenses, litigation settlement costs, and commission guarantees SEC EDGAR.
The forward-looking statements section lists “our ability to favorably resolve regulatory matters related to the Cybersecurity Incident” among the risks the company names SEC EDGAR.
What is not confirmed: the excerpt reviewed does not state when the incident occurred or was detected, how the attacker got in, who is responsible, what data was involved, or how many people are affected. It is a single source, a company filing exhibit, with no independent verification.
Am I affected?
Not confirmed. The filing excerpt does not say which customers, employees or systems were involved. It mentions customer notifications and identity protection as expense categories, but does not say who received them or when SEC EDGAR. No CVE, affected software or fixed version is named.
What to do now
- Read the filing directly on SEC EDGAR, including the main 8-K document it accompanies, which was not part of the text reviewed here.
- If you are a loanDepot customer, rely on notices sent to you by the company and on its official channels rather than third-party claims.
- Treat anything beyond the filing’s wording (attacker, cause, data lost) as not confirmed until loanDepot or a regulator says so.