On March 20, 2026, Finance of America Companies Inc. appeared on the leak site of the ransomware group Worldleaks. The company, which provides mortgage lending, reverse mortgages, and related financial services across the United States, had internal files stolen during a ransomware attack. While the exact number of people affected remains unknown, anyone who has applied for a loan, refinanced a mortgage, or used the company’s services in recent years may have personal information included in the stolen data.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Finance of America Companies Inc.
Get alerted the next time Finance of America Companies Inc. files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Finance of America Companies Inc.’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that Worldleaks posted a listing for Finance of America Companies Inc. on its dark-web leak portal. The group claims to have exfiltrated internal files during a ransomware incident. Available details list the data as internal files but do not yet specify the volume or exact records involved. No sample files have been publicly released in the initial listing, and the company has not issued a formal confirmation as of the latest available information.
The breach follows the typical ransomware pattern of initial access, data theft, and subsequent extortion pressure. Industry research from sources such as DoxxScan™ continuous monitoring indicates that financial-services firms remain frequent targets because customer records often contain names, addresses, Social Security numbers, income details, bank account information, and loan application data.
Why This Matters for You and Your Family
If your mortgage, home-equity loan, or reverse-mortgage application passed through Finance of America, your personal and financial records may now sit on a criminal leak site. Names, addresses, dates of birth, Social Security numbers, and financial histories are valuable to identity thieves who can open new accounts, file fraudulent tax returns, or sell the information on underground markets. For families, a single breach can expose both parents and children when household addresses and shared contact details are included.