Bookmark and Share

Lending Tree lead data stolen – do you know where your social security number is?

by Morgan on April 23, 2008

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

Talk about scary. We all knew that LowerMyBills.com and LendingTree.com provided for a ‘less-than-ideal’ customer experience as consumers got battered by hundreds of calls from rabid mortgage folks; but this announcement is just plain scary. Employees caught stealing data including consumer social security numbers at Lending Tree.

The advent of ‘lead stealing’ from inside employees has to be more common than this – the economics dictate it. An IT person, a fired employee with access to an account can download all the leads and resell them – obstensibly for mortgage purposes (to brokers/agents outside of the 4 banks promised) but perhaps for much more devious purposes. Opening up credit under false pretenses?

This deserves more attention. The Lead Critic is all over it. Here is the announcement from LendingTree – this should lead to a massive inquiry about the lead generating community in general. And talk about powerless – LendingTree recommends getting a free credit report to check for fraud. What a strong recommendation. I’ve never heard a better way of saying “there’s nothing we can do about it.”

An unqualified disaster if you ask me.

From LendingTree:

Dear LendingTree Customer:

We want you to know that some loan request forms our customers sent to LendingTree may have been seen by lenders without our consent. These lenders then used the forms to market their own mortgage loans to our customers. While we don’t believe that the forms were used for any other purpose, we want you to know what happened and what we did to correct this situation, as well as what you can do to monitor your credit records.

What Happened and What We Did

Recently, LendingTree learned that several former employees may have helped a handful of mortgage lenders gain access to LendingTree’s customer information by sharing confidential passwords with the lenders. When we learned of this situation, we quickly contacted the authorities, and LendingTree is helping with their investigation. We promptly made several system security changes. We also brought lawsuits against those involved.

Based on our investigation, we understand that these mortgage lenders used the passwords to access LendingTree’s customer loan request forms, normally available only to LendingTree-approved lenders, to market loans to those customers. The loan request forms contained data such as name, address, email address, telephone number, Social Security number, income and employment information. We believe these lenders accessed LendingTree’s loan request forms between October 2006 and early 2008.

What You Can Do

Again, we don’t believe any identity theft or fraudulent financial activity resulted from this situation. However, we suggest you get a free credit report. Look for any accounts you didn’t open and/or inquiries from creditors that you didn’t initiate. If you see anything you don’t understand, contact the credit bureau. If you see anything suspicious, you may want to file a fraud alert with the bureaus. For more information on how to do this, please refer to LendingTree’s Guide to Protecting Your Credit and Identity.

Where to Get More Information

We regret any inconvenience and apologize for any unwanted mortgage calls you may have received. For more information about this situation, and for more information on what you can do, please refer to the attached Questions & Answers .

Sincerely,

R.L. Harris

Note – if you were looking for another reason not to apply for a mortgage online I’m hoping you’ve found it.

Last 3 posts by Morgan

Related posts:

  1. Monday Blame Game: Mortgage Lead Scumbags
  2. LendingTree lays off 20% of workers
  3. Some Economics of Wholesale Lending: Yet another Reason Why it’s a dead man walking.
  4. Americans for Prosperity Lead Coalition Against Subprime Bailout
  5. Protecting your credit and privacy

  • CD Davis
    Waddya expect from a bunch of ex-Wachovia/First Union hacks
  • OMG. Why didn't they change the passwords when those employees were terminated?
  • one would think that would be a standard IT security best practice. worst
    of all is i heard tons of stories of crooked folks in big lenders' IT
    departments who were duplicating every lead coming through the doors to sell
    to their friends at mortgage shops. that entire process is fraught with
    security gaps.
  • Johnny_Utah
    This kind of thing can happen anywhere... No one's data is ever safe. The thing people need to realize is that their personal information is available to anyone who is willing to pay for it. People need to take things into their own hands and protect themselves, not expect others to do it for them. Sure, there's an expectation of privacy but you shouldn't rely on anyone but yourself for your absolute privcacy/security. Lending Tree should've changed the passwords and needs to re-examine their operations security.

    CD Davis, there are others out there who've made serious security bunders, not just Lending Tree. For example, in Dec 2004 a BOA employee packed up and sent tapes, which were supposed to be encrypted but weren't, to its backup data center. They were sent via commercial air. In Jan of 2005 someone realized that the tapes never made it to the data center. What was on the tapes? Information on government workers who were enrolled in a charge card account. More than a million names, addresses, account numbers, and social security numbers. The bank didn't go public with this until February of 2004. Lending Tree's blunder is peanuts compared to this. So, calling Lending Tree employees a bunch of hacks is ridiculous.

    How secure is the data where you work? How about anyone else? How secure is any of the data we see on a daily basis? A disgruntled employee can start giving away or selling information right under your nose and you would be absolutely clueless about it until someone says something. Before calling people hacks, you should make sure your ship is tight and not leaking water anywhere or, just think about how idiotic a statement like that really is.

    By the way, I don't work for Lending Tree nor am I affiliated with them in anyway.

    Regards,
    Johnny Utah - Quaterback Punk
  • People should place a security freeze on their credit profile at each of the major credit bureaus. That way -- if their information is stolen -- the thieves will be unable to open new lines of credit
  • great recommendation.
  • Interesting post. Appreciate it as I have seen something new now.
    Can I use this info on my blog using the direct link to your blog? Thanks in advance
blog comments powered by Disqus

Previous post: I want their job…

Next post: Sample stated loan research shows 3 out of 5 inflated income at least 50%