Item 8.01. Other Events.
loanDepot, Inc. (the “Company”) recently identified a cybersecurity incident affecting certain of the Company’s systems.¹,² Upon detecting unauthorized activity, the Company promptly took steps to contain and respond to the incident, including launching an investigation with assistance from leading cybersecurity experts, and began the process of notifying applicable regulators and law enforcement³.
Though our investigation is ongoing⁴, at this time, the Company has determined that the unauthorized third party activity included access to certain Company systems and the encryption of data⁵,⁶. In response, the Company shut down certain systems and continues to implement measures to secure its business operations, bring systems back online and respond to the incident⁷.
The Company will continue to assess the impact of the incident and whether the incident may have a material impact on the Company.⁸,⁹,¹⁰
Forward Looking Statements
This current Report on Form 8-K contains “forward-looking statements” within the meaning of the federal securities laws. Forward-looking statements are made based on the Company’s expectations and beliefs concerning future events impacting the Company, and, therefore, involve several risks and uncertainties. You can identify these statements by the use of words such as “will,” “anticipate,” “estimate,” “expect,” “should,” “could” and “may” and similar expressions or the negative versions of these words or comparable words (however, the absence of these words or similar expressions does not mean that a statement is not forward-looking). All statements regarding the impact from the cybersecurity incident, the scope of the investigation and the Company’s plans, objectives, projections and expectations relating to the Company’s operations or financial condition, and assumptions related thereto are forward-looking statements. Forward-looking statements are not guarantees and actual results could differ materially from those expressed or implied in the forward-looking statements. Potential risks and uncertainties that could cause the actual results of the Company’s operations or financial condition to differ materially from those expressed or implied by forward-looking statements include, but are not limited to: the Company’s ongoing assessment of the impacts of the cybersecurity incident; the Company’s expectations regarding its ability to contain and remediate the cybersecurity incident; the impact of the cybersecurity incident on the Company’s relationships with customers, employees and regulators; legal, reputational and financial risks resulting from the cybersecurity incident; and that any future, or still undetected, cybersecurity related incident, whether an attack, disruption, intrusion, denial of service, theft or other breach could result in unauthorized access to, or disclosure of, data, resulting in claims, costs and reputational harm that could negatively affect our actual results of operations or financial condition; and other risks detailed in the “Risk Factors” section of the Company’s Annual Report on Form 10-K for the year ended December 31, 2022 and Quarterly Reports on Form 10-Q as well as any subsequent filings with the Securities and Exchange Commission, including Forms 8-K filed or furnished with the SEC. The Company does not undertake any obligation to publicly update or revise any forward-looking statement to reflect future events or circumstances, except as required by applicable law.