On April 26, 2023, a data breach notice naming Carrington Mortgage Services (“Carrington”) appeared on the “Data Breach Notification Report” generated by the Attorney General of Massachusetts. However, the notice was filed by Alvaria, Inc., which is the company that experienced the breach resulting in Carrington customers’ information being leaked. After confirming that consumer data was leaked, Alvaria began sending out data breach notification letters to all Carrington customers who were impacted by the recent data security incident.
If you received a data breach notification from Alvaria, Inc., it is essential you understand what is at risk and what you can do about it. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Carrington Mortgage Services / Alvaria data breach, please see our recent piece on the topic here.
What We Know So Far About the Carrington Mortgage Services Breach
News of the Carrington Mortgage Services data breach is still fresh; however, what we know at this point comes from Alvaria’s filing with the Attorney General of Massachusetts. Evidently, Alvaria is a vendor used by Carrington to perform certain outsourced services. In Alvaria’s filing, the information provided is sparse; however, Alvaria posted its own data breach notice earlier this year, which provides more information on what appears to be the same incident.
According to Alvaria’s own data breach letter, on November 28, 2022, Alvaria was targeted in a Hive Ransomware attack. In response, Alvaria secured its servers, notified law enforcement, and launched an investigation to learn more about the cyber-attack and what information was removed from the company’s network. However, while Alvaria’s investigation was underway, Hive Ransomware leaked certain information onto the group’s Dark Web leak site. While none of the leaked information belonged to consumers or employees, it did prove that the attack occurred. Thus, Alvaria continued to investigate the incident to determine what other information may have been leaked.
Of course, nowhere in Alvaria’s data breach letter is Carrington mentioned, and it is possible—although unlikely—that the two incidents are unrelated. In the most recent Alvaria filing on behalf of Carrington, the company does not explain what data types were leaked. However, the hackers who carried out the ransomware attack against Alvaria were able to obtain highly sensitive information, including Social Security numbers belonging to Alvaria employees.
On April 26, 2023, Alvaria, on behalf of Carrington Mortgage Services, sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.
More Information About Carrington Mortgage Services
Founded in 2007, Carrington Mortgage Services is a mortgage company based in Anaheim, California. The company offers a variety of mortgage products in all 50 states. Carrington Mortgage Services is a subsidiary of Carrington Holding Company, which is a privately managed investment management company that also operates the following affiliated companies: Vylla Home, Vylla Title, and Vylla Escrow. Carrington Mortgage Services employs more than 2,716 people and generates approximately $1.2 billion in annual revenue.
More Information About Alvaria, Inc.
Alvaria, Inc. is a business software company based in Westford, Massachusetts. The company was recently formed through the merger of Aspect Software and Noble Systems, two companies that offered a variety of Customer Experience (CX) and Workforce Engagement solutions. Alvaria creates software that enables companies to better understand and track the customer experience, as well as workforce engagement. Alvaria employs more than 2,000 people and generates approximately $423 million in annual revenue.
