On October 5, 2024, Rockport Mortgage Corporation appeared on the leak site operated by the Black Basta ransomware group. The Massachusetts-based lender, which specializes in FHA-insured financing for multifamily housing, healthcare facilities, and assisted living projects, is the latest victim in the group’s ongoing extortion campaign. Anyone whose personal or financial records passed through Rockport’s systems—employees, customers, borrowers, or vendors—may now face heightened risk of identity theft and targeted fraud.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
Reported Details from the Listing
The Black Basta leak site states that attackers exfiltrated roughly 1.1 TB of internal files during a ransomware incident. The listing explicitly names five categories of stolen material: employees’ personal documents, financial data, accounting, and payroll records, users’ personal folders, customers’ data, and tax and confidential documents. The disclosure does not quantify the number of affected individuals, nor does it specify the exact date of initial compromise. It does, however, warn that the data will be published if the company refuses to negotiate.
Why This Matters for You and Your Family
When a mortgage company loses control of customer files, the exposure goes far beyond a single loan application. Borrowers routinely submit Social Security numbers, bank statements, tax returns, employment history, and family financial details. Employees surrender similar information plus direct-deposit routing data and health-insurance records. Once these documents leave the company’s protected environment, they become raw material for identity thieves who can open accounts, file fraudulent tax returns, or impersonate victims to lenders. Because Rockport focuses on affordable housing and healthcare facilities, many affected families are likely to be lower- or middle-income households already sensitive to financial disruption.
The Doxxing and Identity-Chain Risk
Stolen internal folders often contain more than isolated records. They frequently link names, email addresses, phone numbers, physical addresses, and sometimes spouse or dependent information. Attackers and subsequent data brokers can chain these fragments together, turning one breach into a persistent profile that follows you across future incidents. Credential leaks from such folders routinely cascade into account takeovers on email, banking, and—critically—gaming platforms. Children’s usernames and passwords reused from family computers are especially vulnerable; a compromised Roblox or Fortnite account can expose chat logs, voice recordings, and linked parent accounts, accelerating doxxing campaigns. DoxxScan by GalaxyWarden continuously monitors 13.1 billion+ breach records across more than 100 platforms and uses AI-powered identity-chain mapping to reveal these hidden connections before criminals exploit them.