On February 14, 2025, Xactus LLC filed a notice of data breach with the Attorney General of Massachusetts after discovering that an unauthorized party was able to access a company email account. In this notice, Xactus explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, financial account information, and driver’s license numbers. Upon completing its investigation, Xactus began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from Xactus LLC, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Xactus data breach. For more information, please see our recent piece on the topic here.
What Caused the Xactus Data Breach?
The Xactus data breach was only recently announced, and more information is expected in the near future. However, Xactus’ filing with the Attorney General of Massachusetts provides some important information on what led up to the breach. According to this source, on July 15, 2024, Xactus detected suspicious activity within its email system. In response, Xactus quickly secured its email environment and then enlisted the help of third-party cybersecurity experts to investigate the incident.
Through this investigation, Xactus confirmed that there was unauthorized access to one email account between June 26, 2024, and July 15, 2024. The Xactus investigation also revealed that, although the unauthorized actor was detected and removed within an hour of discovery, they were able to acquire confidential information from the affected email account.
After learning that sensitive consumer data was accessible to an unauthorized party, Xactus reviewed the compromised files to determine what information was leaked and which consumers were impacted. Xactus completed this process on November 25, 2024, and while the breached information varies depending on the individual, it may include your name, financial account information, and driver’s license number. Xactus then set out to find contact information for all affected parties, which was completed on January 15, 2025.
On February 14, 2025, Xactus sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About Xactus LLC
Xactus is a provider of verification solutions for the mortgage industry, specializing in credit reporting, property valuation, and data analytics. Headquartered in Broomall, Pennsylvania, the company offers technology-driven solutions that help lenders streamline the mortgage approval process, improve risk assessment, and ensure compliance with industry regulations. The organization employs approximately 500 people and generates an estimated $105 million in annual revenue.
