The Money Store Data Breach Exposes Personal and Financial Information

The Money Store, a residential mortgage lender operated by MLD Mortgage Inc., disclosed a data breach that occurred through a remote monitoring and management platform used by a third-party service provider.

On Sept. 9, 2026, The Money Store identified unusual activity within portions of its information technology environment. The company took steps to secure its systems and engaged independent cybersecurity specialists to assist with the investigation.

The investigation determined that beginning on or about Sept. 8, 2026, an unauthorized third party accessed a portion of the company's environment through a remote monitoring and management platform used by a third-party service provider that supports the company's IT systems. The unauthorized party accessed and acquired certain information from the affected systems during the period of access.

On Sept. 21, 2026, a ransomware group known as Storm claimed responsibility for the attack on a dark web site hosted on the Tor network. The group claimed to have obtained 229 GB of the company's data and threatened to publish it within 15 days.

The types of personal information confirmed to have been exposed included names, Social Security numbers, driver's license numbers, government-issued identification numbers (such as passports or state ID cards), financial information (such as account numbers or credit and debit card numbers), medical information and dates of birth.

The breach was disclosed to the attorneys general offices of California and Texas starting on Oct. 15, 2026. The company began mailing affected consumers notification letters on Oct. 15, 2026.

So far, 1,367 Texas residents were affected.

The Money Store's response to the breach

The company is offering complimentary identity theft protection services through IDX. Affected individuals can enroll in the services by calling 1-866-200-0951 or visiting the IDX enrollment page.

IDX representatives are available Monday through Friday from 9 a.m. to 9 p.m. Eastern Time, excluding major U.S. holidays. The deadline to enroll is Jan. 15, 2027.

The company also noted that if individuals provided supporting tax documents containing their dependents' names and Social Security numbers during the loan origination process, those dependents' information may also have been involved. Complimentary identity protection services are available for minor dependents as well. Individuals with additional questions can reach The Money Store directly at 844-646-6639.