McLean Mortgage Corporation has experienced a data breach that exposed sensitive personal and financial information of thousands of individuals. The cybersecurity incident, which was caused by a ransomware attack attributed to the BlackBasta group, affected a total of 30,453 people in the United States.
The company identified suspicious activity within its internal digital network on October 17, 2024. An investigation was launched and completed on May 12, 2025, and it was determined the types of consumer information exposed in this incident include Social Security numbers, driver’s license numbers, financial account numbers, first and last names, and other personal identifiers.
The BlackBasta ransomware group announced on the dark web that they had compromised McLean Mortgage Corporation’s systems and threatened to publish the stolen data within 7-8 days if their demands were not met.
The hackers claimed to have stolen approximately 1 TB of data, including accounting records, financial data, loan details, payroll information, tax documents, human resources files, confidential business data, and personal documents belonging to both customers and employees. Among those impacted were 17 Mainers, 44 Massachusetts residents and nine New Hampshire residents.
The incident was reported to the Maine, Massachusetts and New Hampshire Attorney Generals' offices on June 11, 2025 and to the Vermont Attorney General’s office on June 12, 2025.
Written notices were sent to affected individuals beginning June 11, 2025.
McLean Mortgage Corporation has begun notifying the relevant state authorities. Impacted consumers have been notified by mail.
If you receive notification from McLean Mortgage about this data breach, you may want to:
Affected individuals with questions or concerns can contact a toll free number that has been set up to offer assistance at 1-855-201-2711, Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time