What is the official website of LoanCare ?

The official website of LoanCare is http://www.loancareservicing.com.

What is LoanCare's cybersecurity risk score?

LoanCare has an AI-generated cybersecurity risk score of 668 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has LoanCare experienced?

According to Rankiteo, LoanCare currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has LoanCare been affected by any supply chain cyber incidents ?

According to Rankiteo, LoanCare has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does LoanCare have SOC 2 Type 1 certification ?

According to Rankiteo, LoanCare is not certified under SOC 2 Type 1.

Does LoanCare have SOC 2 Type 2 certification ?

According to Rankiteo, LoanCare does not hold a SOC 2 Type 2 certification.

Does LoanCare comply with GDPR ?

According to Rankiteo, LoanCare is not listed as GDPR compliant.

Does LoanCare have PCI DSS certification ?

According to Rankiteo, LoanCare does not currently maintain PCI DSS compliance.

Does LoanCare comply with HIPAA ?

According to Rankiteo, LoanCare is not compliant with HIPAA regulations.

Does LoanCare have ISO 27001 certification ?

According to Rankiteo,LoanCare is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does LoanCare operate in ?

LoanCare operates primarily in the Financial Services industry.

How many employees does LoanCare have ?

LoanCare employs approximately 1,232 people worldwide.

Does LoanCare own any subsidiaries ?

LoanCare presently has no subsidiaries across any sectors.

How many LinkedIn followers does LoanCare have ?

LoanCare's official LinkedIn profile has approximately 23,888 followers.

What is the NAICS classification code for LoanCare ?

LoanCare is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does LoanCare have a Crunchbase profile ?

No, LoanCare does not have a profile on Crunchbase.

Does LoanCare have a LinkedIn profile ?

Yes, LoanCare maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/loancare.

How many cybersecurity incidents has LoanCare experienced ?

As of July 10, 2026, Rankiteo reports that LoanCare has experienced 1 cybersecurity incidents.

How many peer or competitor companies does LoanCare have ?

LoanCare has an estimated 32,254 peer or competitor companies worldwide.

What types of cybersecurity incidents has LoanCare faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

LoanCare

Boost Score +25 with badge (5 left)

668

/1000

Weak

693

/1000

Weak

LoanCare Vendor Cyber Rating & Cyber Score

loancareservicing.com

Add Your Compliance Badge

LoanCare® is a leading provider of full-service mortgage loan subservicing, including special loans, white label, and marketing services. The award-winning company is known for delivering a superior customer experience through personalization and convenience. Its proprietary portfolio management platform, LoanCare Analytics™, identifies risk and opportunity quickly to enable smarter decision-making across the servicing spectrum. For over 40 years, LoanCare has been servicing loans for banks, credit unions, independent mortgage companies, and portfolio investors. LoanCare is part of Fidelity National Financial (NYSE: FNF), a Fortune 500 company and leading provider of title insurance and transaction services to real estate and mortgage

LoanCare A.I CyberSecurity Scoring

Scoring History

LoanCare

LoanCare CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

LoanCare

Ransomware

100

11/2023

LOA559072525

Loading…

A.I.

LoanCare Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for LoanCare

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for LoanCare in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for LoanCare in 2026.

Incident Types LoanCare vs Financial Services Industry Avg (This Year)

No incidents recorded for LoanCare in 2026.

Incident History - LoanCare (X = Date, Y = Severity)

Loading…

SUBSIDIARY

LoanCare Subsidiaries

Parent Company

LoanCare

Financial Services

Website: http://www.loancareservicing.com

Company Size: 1,001-5,000 employees

No subsidiary data available for this company.

Loading…

LoanCare Similar Companies

Lloyds Banking Group

lloydsbankinggroup.com

Our purpose is Helping Britain Prosper. We do this by creating a more sustainable and inclusive future for people and businesses, shaping finance as a force for good. We're part of an ever-changing industry and are currently on a journey to shape the financial services of the future, whilst supporting our customers’ changing needs. The scale and reach of our Group means we can offer a broad range of opportunities to learn, grow and develop. Our values-led culture and approach to inclusion and diversity means we can all make a real difference together.

PING AN

cb pingan.com

This is the official Company Page of Ping An Insurance (Group) Company of China, Ltd. (HKEx: 2318; SSE: 601318; ADR: PNGAY). Ping An strives to become a world leading technology-powered financial services group. We believe the way people receive financial services and healthcare in the future will be through intelligent ecosystems enabled by technology. With over 220 million retail customers and nearly 611 million Internet users, Ping An is one of the largest financial services companies in the world. Technology has enabled us to bring changes to the landscape of retail finance and healthcare in China. Supported by the Group’s strong core financials, our continued investment in fintech and healthtech resulted in increasing revenue contributions from our tech units as well as several unicorns. Ping An ranked 6th in the Forbes Global 2000 list and 16th in the Fortune Global 500 list in 2021. Follow us for latest news, events and job opportunities.

BNY

bny.com

BNY is a global financial services platforms company at the heart of the world’s capital markets. For more than 240 years BNY has partnered alongside clients, using its expertise and platforms to help them operate more efficiently and accelerate growth. Today BNY serves over 90% of Fortune 100 companies and nearly all the top 100 banks globally. BNY supports governments in funding local projects and works with over 90% of the top 100 pension plans to safeguard investments for millions of individuals. As of March 31, 2026, BNY oversees $59.4 trillion in assets under custody and/or administration and $2.1 trillion in assets under management. NYSE: BK Follow BNY on Instagram & X: @BNYglobal

USAA

usaajobs.com

Since the beginning, our mission has been to provide a range of financial services to the military community and their families. Along the way, we’ve also established ourselves as a destination employer for passionate people looking to serve those who are willing to give it their all. Our mission is to stand with our members and be there for them and their families by facilitating their financial security. It starts with offering a range of highly competitive products, exceptional service, and trusted advice. But to be the military community’s provider of choice also takes dedicated team members who share our core values of service, loyalty, honesty, and integrity.

Credicorp

grupocredicorp.com

Somos el grupo financiero líder en el Perú con una vasta experiencia en el mercado peruano. Contamos con una sólida plataforma de Banca Comercial reforzada por una importante presencia en Banca de Inversión en Latinoamérica destinada a desarrollar el potencial de la región y acompañar a nuestros clientes en su crecimiento. Ofrecemos un modelo de servicios financieros completo y diversificado en países como Perú, Bolivia, Estados Unidos, Panamá, Chile y Colombia; y desarrollamos operaciones esencialmente a través de nuestras seis principales subsidiarias: Banco de Crédito del Perú, BCP Bolivia, Mibanco, Pacífico Compañía de Seguros y Reaseguros, Prima AFP, Atlantic Security Bank y Credicorp Capital. El negocio de Credicorp se concentra principalmente en cuatro líneas de negocio: Banca Universal, Microfinanzas, Seguros y Pensiones, y Asesoría y Gestión de Inversiones.

Vanguard

vanguard.com

We are a community of 50 million who think—and feel—differently about investing. Together, we’re changing the way the world invests. For over 50 years, Vanguard has helped people pursue their financial goals with a spotlight on long-term value and low costs. We’ve made it a focus to put investors first, so whether you’re saving for your first home or investing for a comfortable retirement, we’re here to help you succeed. Community guidelines: vgi.vg/sgl1

ICE

ice.com

ICE (NYSE: ICE) connects people to data, technology and expertise that create opportunity and inspire innovation. For terms of use, visit www.ice.com/privacy-security-center/terms-of-use

State Street

cb statestreet.com

At State Street, we deliver leading investment platforms, data, expertise, and solutions that accelerate performance and better decision making. With over 200 years of global financial leadership, we equip institutional investors through a comprehensive suite of capabilities: Investment Services: Integrated front-to-back solutions across custody, accounting, and operations. Investment Management: Index and active strategies from one of the world’s largest asset managers. Markets: Multi-asset trading, FX solutions, and data-driven research to enhance portfolio value. Who We Are • 50,000+ employees worldwide • Active in 100+ markets • #1 in ETF servicing What You’ll Find Here • Executive perspectives and thought leadership • Timely market commentary and macro insights • Our views on investment operations, ETFs, private markets, and digital finance • Stories reflecting our culture, values and commitment to diversity and inclusion

Marsh McLennan

marsh.com

Marsh (NYSE: MRSH) is a global leader in risk, strategy and people, advising clients in 130 countries across four businesses: Marsh Risk, Guy Carpenter, Mercer and Oliver Wyman. With annual revenue over $24 billion and more than 90,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective

Loading…

NEWS

LoanCare CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 07, 2025 07:00 AM

Americans to get payments between $100 and $6,500 from $5.9 million 'cybersecurity' settlement - all you need is a bill

PAYMENTS between $100 and $6500 will be given to Americans implicated in a cybersecurity class action settlement.With a bill being the only...

Read Article

April 30, 2025 07:00 AM

LoanCare Data Breach Settlement: How To Claim 100

The LoanCare data breach settlement stems from a cybersecurity incident that potentially exposed sensitive personal information of thousands...

Read Article

April 28, 2025 07:00 AM

LoanCare & Fidelity National settle data breach class action for $5.9 million with cash payments to impacted consumers

If you received a LoanCare or Fidelity National data breach notice, you may qualify to claim up to $5000 from a class action settlement.

Read Article

January 09, 2024 08:00 AM

Citrix Systems, LoanCare Sued Over November Data Breach

Citrix Systems Inc. and mortgage-loan services provider LoanCare LLC allegedly failed to protect the personal information of millions of people that was...

Read Article

January 02, 2024 08:00 AM

1.3 Million LoanCare Customers Have Personal, Financial Data Exposed

The November 19 cyberattack that temporarily took down Fidelity National Financial's online systems exposed the personal and financial data...

Read Article

December 29, 2023 08:00 AM

Mortgage Company Data Breach Exposes More Than a Million Americans

More than 1 million Americans have been exposed after mortgage company LoanCare suffered a data breach last month.

Read Article

December 27, 2023 08:00 AM

LoanCare, LLC Confirms Recent Data Breach Affecting 1.3m Consumers

LoanCare, LLC filed a notice of data breach with the Attorney General of Maine after discovering that an unauthorized party had accessed the computer system of...

Read Article

December 26, 2023 08:00 AM

Fidelity National Financial subsidiary says 1.3 million affected by November cyberattack

A subsidiary of title insurance giant Fidelity National Financial reported a data breach to state regulators this week after a cyberattack...

Read Article

December 26, 2023 08:00 AM

LoanCare says data breach affected 1.3M mortgage customers

Parent company Fidelity National Financial has not said whether other subsidiaries were affected in cybersecurity incident it discovered and...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-59858

SUMMARY

Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honors the bar as a command separator, a crafted tag field can close the search pattern and append an arbitrary Ex command; opening a hostile .c file whose project tags file contains such an entry and invoking C omni-completion runs that command as the editing user. This issue is fixed in version 9.2.0735.

Published

Date2026-07-09

Updated

Date2026-07-09

RISK INFORMATION (Score: )

cvss4

Base Score: 8.4

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-59857

SUMMARY

Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spell_soundfold_sal() in src/spell.c translates a word through a spell file's SAL sound-folding rules into a caller-owned result buffer, but its result writes are guarded with reslen < MAXWLEN, allowing reslen to reach MAXWLEN before res[reslen] = NUL writes one byte past the end of the MAXWLEN-element stack buffer. A boundary-length word passed to soundfold(), or reached via sound-based spell suggestion while a SAL-based spell language is active under a non-multibyte 8-bit encoding, can corrupt the eval_soundfold() stack frame and crash the editor. This issue is fixed in version 9.2.0725.

Published

Date2026-07-09

Updated

Date2026-07-09

RISK INFORMATION (Score: )

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-59856

SUMMARY

Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search() pattern that is run via win_execute() without escaping. A name containing a single quote can terminate the search() string argument early, and because the bar is honored as an Ex command separator, the remainder of the name is run as Ex commands; via the :! command this allows arbitrary operating-system command execution when a victim opens a crafted PHP file and invokes omni-completion. This issue is fixed in version 9.2.0736.

Published

Date2026-07-09

Updated

Date2026-07-09

RISK INFORMATION (Score: )

cvss4

Base Score: 8.4

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-59855

SUMMARY

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, Asset.render in app/src/asset/index.ts interpolates the unsanitized this.path value into HTML assigned to innerHTML, allowing a crafted asset link containing a double quote to break out of the src attribute, inject an event handler, and execute JavaScript that can run OS commands in the Electron renderer. This issue is fixed in versions 3.7.1-alpha.2 and 3.7.1.

Published

Date2026-07-09

Updated

Date2026-07-09

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-59854

SUMMARY

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/file/globalCopyFiles accepts attacker-supplied absolute source paths and relies on util.IsSensitivePath in kernel/util/path.go, whose denylist misses common home-directory credential files such as .git-credentials, .netrc, .pgpass, .kube/config, .docker/config.json, and .gnupg, allowing an authenticated administrator or API-token user to copy those files into the workspace and exfiltrate them through the file API. This issue is fixed in versions 3.7.1-alpha.2 and 3.7.1.

Published

Date2026-07-09

Updated

Date2026-07-09

RISK INFORMATION (Score: 4.9)

cvss3

Base Score: 4.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

1.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…