Keylend Investigates Phishing Incident After Unauthorized Email Access Australian mortgage broking firm Keylend, a Top 25 brokerage with a $3.5 billion loan book, disclosed a phishing incident on 23 April 2026 after an unauthorized third party gained access to a single employee’s email account. The company, a full member of the Mortgage and Finance Association of Australia (MFAA), immediately secured the compromised account and launched an investigation with external advisors. In an initial alert, Keylend warned recipients of the suspicious email to avoid clicking links or downloading attachments and to report any interactions to IT support. A June update confirmed that the attacker had accessed the account, potentially copying mailbox contents, including contact details used in the phishing campaign. While no evidence of stolen data has appeared on the dark web, Keylend is conducting a full review to identify affected individuals at risk of serious harm. The incident was reported to Australia’s Office of the Australian Information Commissioner (OAIC) and the Australian Securities and Investments Commission (ASIC). Keylend continues to monitor for further exposure but has not attributed the attack to any known threat actor. The investigation remains ongoing.