Xactus, a provider of verification solutions for the mortgage industry fell victim to a cybersecurity attack, resulting in a significant data breach. Impacted individuals are urged to remain vigilant by monitoring financial statements, updating passwords, and staying alert to phishing attempts. For more information, visit our guide on how to protect your information after a data breach and minimize potential harm.
Xactus Data Breach Details
On July 15, 2024, Xactus, a provider of verification solutions for the mortgage industry, identified suspicious activity in its email tenant and swiftly took action to secure its environment. The company engaged third-party forensic specialists to investigate the nature and scope of the incident.
Through the investigation, Xactus determined that an unauthorized actor had intermittently accessed one email account between June 26, 2024, and July 15, 2024. Although the unauthorized access was detected and removed within an hour of discovery, forensic analysis confirmed that the attacker had acquired certain information stored in the compromised email account.
As part of its commitment to protecting affected individuals, Xactus is offering complimentary credit monitoring and identity restoration services through IDX for 24 months. Impacted individuals must enroll themselves in these services, as Xactus cannot do so on their behalf.