Towne Mortgage Confirms Data Breach Following Ransomware Attack

Full-service mortgage lender, Towne Mortgage Company, disclosed a major data breach, following a ransomware attack, that has impacted the personal information of its customers. The incident was first detected on June 7, 2025, when unauthorized access to the company’s network occurred.

After a forensic investigation and manual review, Towne Mortgage Company confirmed on Oct. 14, 2025, that files containing customer data may have been copied from its systems. The breach was publicly disclosed to the Massachusetts Attorney General on Nov. 14, 2025, and affected individuals have since been notified.

The breach was attributed to the BlackByte ransomware group, which claimed responsibility and posted sample data on its dark web portal on July 30, 2025, indicating the severity and criminal nature of the attack.

Ransomware typically encrypts files and threatens to release or sell stolen data unless a ransom is paid. The fact that BlackByte published sample data online increases the risk that affected individuals’ information could be misused for identity theft or fraud.

Towne Mortgage Company's response

In response to the incident, Towne Mortgage Company has notified affected individuals and is offering complimentary 24-month credit monitoring, single bureau credit reports, and credit score services through Cyberscout, a TransUnion company specializing in fraud assistance and remediation.

Affected individuals are encouraged to enroll in these free services within 90 days of receiving the notification letter. The credit monitoring service provides alerts when changes occur to a person’s credit file, helping detect potential fraud quickly.

In addition, Towne Mortgage Company is providing proactive fraud assistance and guidance on placing fraud alerts or security freezes with the three major credit bureaus, Equifax, Experian and TransUnion. Customers are also advised to review their financial account statements and credit reports regularly for any irregular or unauthorized activity.