loanDepot notifying 17 million customers after ransomware attack in January

BlackCat reportedly added loanDepot to its dark-web leak site and claimed negotiations for a decryptor, while loanDepot's breach notification states that an incident discovered in early January exposed PII for approximately 16,924,071 customers (including SSNs and financial account numbers); the company has been posting status updates and is offering affected customers two years of Experian monitoring.