AI Is Exploiting the Mortgage Industry’s Weak Cyber Defenses — And the Threat Is Growing Faster Than Protection
The U.S. mortgage industry is under siege. As artificial intelligence evolves at breakneck speed, cybercriminals are using it to launch increasingly sophisticated attacks against lenders, servicers, and financial institutions that hold mountains of consumer data. And experts warn the industry’s defenses are nowhere near strong enough to keep up.
The past two years have seen a wave of high‑profile breaches: servicing giant Mr. Cooper, consumer‑direct lender loanDepot, title insurance heavyweight Fidelity National Financial, wholesale lenders Fairway Independent Mortgage Corp. and Nations Direct Mortgage, and title titan First American Financial. Even major vendors serving top banks such as JPMorgan Chase, Citi, and Morgan Stanley have been struck.
But those are only the attacks we hear about—many others go unreported.
AI Has Shifted the Threat Landscape Overnight
According to cybersecurity expert Michael Nouguier of Richey May, AI has “absolutely” changed the nature of attacks in the mortgage sector. The two primary entry points, he explains, are email and poor systems management.
And with AI, email scams have become dangerously convincing.
“We used to train people to look for misspellings, broken English and grammatical errors,” Nouguier says. “Now everybody just writes their emails in ChatGPT, so it’s perfectly orchestrated.”
The result? Even seasoned professionals are being duped. Nouguier recounts a client whose compromised email led to a $19,000 payment to a cybercriminal instead of a vendor—an error that could have easily hit six figures.
The bigger problem: while attacks using AI are soaring, the mortgage industry’s adoption of AI‑based protection tools is crawling behind.
Regulation Lags Behind AI—And Politics Are Complicating It
As mortgage companies experiment with AI to streamline workflows, improve decision‑making, and cut costs, lawmakers are scrambling to determine how the technology should be governed. State legislatures want strong guardrails. The federal government—especially under President Trump—has pushed back, arguing that overregulation could stifle innovation.
Recently, Trump even proposed blocking states from enforcing their own AI laws, instead favoring a unified federal approach.
But states aren’t backing down. Colorado, Tennessee, and Florida have already rolled out AI‑related laws aimed at protecting consumers from privacy violations, discrimination, and unauthorized likeness replication. More are on the way.
Industry leaders say the current patchwork of state-by-state rules makes compliance harder and more expensive. A centralized federal standard, they argue, could streamline innovation and protect consumers more consistently.
Mortgage Servicers Struggle With Scale of AI Risks
Mortgage servicers handle billions in loan data—data that must be precise. One error can multiply across tens of thousands of borrowers.
“When we get something wrong, we don’t get it wrong once,” says Toby Wells of Cornerstone Servicing. “We get it wrong tens of thousands of times.”
Because of that, many servicers are intentionally cautious about deploying AI broadly. Instead, they focus on smaller integrations with low risk while the regulatory dust settles.
The Mortgage Industry Is Critical Infrastructure—And AI Threats Are Outpacing Governance
Cybersecurity executives like Kyle Draisey of Sagent say the mortgage industry should be considered part of America’s critical infrastructure. After all, companies like Sagent and Black Knight support trillions of dollars in servicing portfolios—systems as important as the electrical grid or air traffic control.
A recent Dun & Bradstreet survey found that nearly 80% of financial and insurance professionals see AI‑driven cyber risk as their top threat. Yet more than a third admit their companies are not prepared to handle it.
Draisey believes that collaboration is the missing piece. Other critical sectors use Information Sharing and Analysis Centers (ISACs) to coordinate threat intelligence. The financial industry already has one—with a mortgage subcommittee—but no equivalent exists specifically for AI.
He argues it’s time to create one.
“Cybersecurity is a team sport,” Draisey says. “Let’s pull back the curtain. We should share how we’re implementing responsible and secure AI so everyone benefits.”
What Professionals Need to Know—and How to Stay Ahead
The message is clear: AI is not just another tool. It’s a new attack surface, and mortgage companies—large and small—must rapidly upgrade their cyber readiness. That means investing in training, strengthening systems, revisiting vendor relationships, and staying compliant with evolving regulation.
For professionals across real estate, lending, insurance, and financial services, this evolving landscape underscores a crucial point: education is no longer optional. Understanding cybersecurity, AI governance, and digital risk is becoming a core competency in every licensed profession.
At Cameron Academy, we’ve seen firsthand how professionals who stay ahead of technology trends are the ones who grow fastest in their careers. Whether you’re in mortgage, real estate, insurance, or another licensed field, continuous learning is your best defense—and your biggest advantage.
Getting licensed or staying ahead in your career can be a journey—but it doesn’t have to be overwhelming. Grab your favorite coffee or tea, take a moment to relax, and browse through our articles. Whether you’re just starting out or renewing your expertise, we’ve got tips, insights, and advice to keep you moving forward. Here’s to your success—one sip and one step at a time!
Four of the largest Multiple Listing Services (MLSs) in the Southeast have recently formed an alliance, establishing a data sharing network aimed at increasing referral business among real estate agents. The Charleston Regional MLS in South Carolina, Canopy MLS in North Carolina, Georgia MLS, and Realtracs, the largest MLS in Alabama, Kentucky, and Tennessee, have come together to create the Southeast MLS Alliance. This strategic partnership will enable members of these four MLSs to access over 85,000 listings across Alabama, Georgia, Kentucky, North Carolina, Tennessee, and South Carolina, providing real estate agents with valuable data and expanding their referral opportunities throughout the Southeast.
The current state of the mortgage market has presented prospective homebuyers with a significant challenge – surging mortgage rates. These rates have reached a 20-year high, hovering around 7.7%, making it increasingly difficult for borrowers to secure affordable loans. As a result, borrowers are actively seeking support from their family members to overcome this hurdle. To combat the impact of surging mortgage rates, borrowers are turning to their parents for financial assistance. This can take the form of gifted funds or by having parents become non-occupant co-borrowers. By involving family members in the mortgage process, borrowers can increase their chances of securing loans and achieving their homeownership goals.
In a surprising turn of events, Inga Dow, a prominent Keller Williams franchisee and CEO of multiple Texas-based Keller Williams offices, has withdrawn her sexual misconduct lawsuit against the real estate giant. While Dow's claims against Keller Williams and its co-founder, Gary Keller, have been dropped, the lawsuit against former CEO John Davis remains ongoing. The outcome of this legal battle is still uncertain, and further details may emerge as the case progresses. Stay informed with Cameron Academy's online courses tailored to your needs and goals in the real estate industry.
The recent approval of Remote Online Notarization (RON) legislation in California is a significant development that Cameron Academy is thrilled to discuss. This progressive bill, signed into law by Governor Gavin Newsom, enables individuals to notarize their documents remotely using advanced audiovisual technology. The introduction of RON legislation in California brings about numerous advantages that revolutionize the notarization process. By embracing digital advancements, California is empowering individuals and businesses with enhanced convenience and accessibility, significant time and cost savings, improved security, and streamlined workflow.
"Even though mortgage origination volumes are down, we’re experiencing a highly competitive purchase market. That means a number of businesses, seeking to grow their revenue, will likely look to expand their reach to the default and REO space. However, venturing into this industry without proper knowledge and preparation can lead to serious consequences. By understanding the lessons learned from the past foreclosure wave and staying current with the changing environment, businesses can navigate the challenges and seize the opportunities presented by the default and REO market."
In the ongoing legal battle involving the National Association of Realtors (NAR), Keller Williams, and HomeServices of America, a recent development has emerged. The plaintiffs in the lawsuit, known as the Sitzer/Burnett plaintiffs, have filed a notice to withdraw three named plaintiffs. This move is seen by the defendants as an attempt to avoid cross-examination. The lawsuit, initially filed in April 2019, challenges NAR's Participation Rule, which requires listing agents to offer compensation to buyers' agents in order to list a property on a Realtor-affiliated multiple listing service (MLS). The plaintiffs argue that this commission sharing inflates costs for consumers, in violation of the Sherman Antitrust Act. With the trial scheduled to start on October 16, the potential damages in this suit are estimated to be up to $4 billion.
