Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesloanDepot experienced unauthorized access to its systems from January 3 to January 5, 2024. The company first estimated that about 16.6 million people’s sensitive information was in affected systems; a later SEC filing said it expected to notify up to approximately 16.9 million people. Settlement materials identify approximately 16,924,007 U.S. individuals who received individualized notice that their information may have been affected.
The settlement received final approval on August 25, 2025. Its May 27, 2025 claim deadline has passed, so readers should not assume a new claim can be filed. The company called the event a cybersecurity incident involving unauthorized access. Plaintiffs in the consolidated lawsuit described it as a ransomware attack and alleged data exfiltration, but those allegations were not a court finding of liability.
What happened at loanDepot?
loanDepot says an unauthorized third party accessed systems between January 3 and January 5, 2024. The company took systems offline or disrupted operations, investigated with law enforcement and regulators, and later notified people whose information may have been involved. Its January 22 update said approximately 16.6 million individuals could have had sensitive information in the affected systems and that affected people would receive no-cost credit monitoring and identity-protection services.
loanDepot’s initial public disclosure was made January 8, 2024, according to litigation materials. The company’s regulatory filing describes unauthorized access and the response; it does not itself establish that a particular criminal group stole every listed data element. See loanDepot’s January 22 statement and its SEC filing.
#1 Best Overall
- 【Cross Cut & Credit Card Paper Shredder】The cross cut shredder shreds paper into 5x14mm particles, achieving P-4 level security. Shreds up to 6 sheets at once without removing staples, also handling paper clips and credit card (one at a time)
- 【Continuous Performance】The operating time is 4 minutes, with a 20-minute cooling cycle. If the shredding time exceeds 4 minutes, the overheating indicator will light up. After a 20-minute cooling cycle, it can resume operation
- 【Easy to Clean & Place】 Bonsaii shredder’s head features a handle for easy lifting; the separate 3.4-gallon bin has a clear window for quick disposal. Compact dimensions (11.81" × 7.09" × 14.26") make it perfect for home and small office spaces, fitting neatly under desks.
- 【Easy Operation & Safety Features】Auto start/stop and manual-reverse functions protect the paper shredder from the frustration of paper jams. The overheat protection function effectively extends the lifespan of the shredder, The document shredder will stop working once you lift the head, ensuring your safety.
- 【1-Year Warranty】Bonsaii offers a 1-year warranty for your shredders for home use heavy duty. If you have any questions, please feel free to contact us. We test every shredder before shipping, so you may notice some paper shreds from the testing
Why the affected-person number changed
The figures represent different points in the investigation and notification process, not three separate incidents.
| Source or stage | Number | What it means |
|---|---|---|
| January 22, 2024 company update | Approximately 16.6 million | Early estimate of people whose sensitive information was believed to be in affected systems. |
| SEC disclosure | Up to approximately 16.9 million | Later estimate of people loanDepot expected to notify. |
| Settlement materials | Approximately 16,924,007 | U.S. individuals sent individualized notice that their personally identifiable information may have been affected. |
Being included in the notified population means information may have been affected. It does not prove that every person’s full record was accessed, that information was published, or that each person experienced identity theft.
What information may have been exposed?
The settlement FAQ and claim materials say potentially affected information may have included:
- Names
- Postal addresses
- Email addresses
- Telephone numbers
- Dates of birth
- Social Security numbers
- Financial account numbers
The correct qualification is “may have included” or “potentially acquired.” The public materials do not establish that every notified individual had every category exposed. Review the settlement FAQ and claim form for the administrator’s wording.
Was the loanDepot incident definitively ransomware?
loanDepot’s official disclosures used terms such as “cybersecurity incident” and unauthorized access. Plaintiffs’ consolidated complaint called the event a ransomware attack and alleged that a ransomware group exfiltrated data. Those statements are allegations in litigation, not an adjudicated finding that a named ransomware group carried out the incident or that loanDepot was liable.
Rank #2
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 1.2 inches (5 x 30 mm) pieces; meets security level P-3 standards
- Shreds up to 12 sheets of 20-pound bond paper at a time, also can shred credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 9 minute runtime and 30 minute cool down; if unit goes over max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; 5 gallon bin reduces empty frequency
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
The distinction matters: system disruption, unauthorized access, encryption, and data theft are related but separate facts. The public company and SEC disclosures confirm the incident and investigation; the complaint supplies the plaintiffs’ characterization. Read the consolidated complaint alongside the SEC disclosure rather than treating the allegation as a final finding.
What lawsuit followed?
Multiple proposed class actions were filed and consolidated as In re loanDepot Data Breach Litigation, case 8:24-cv-00136-DOC-JDE, in the U.S. District Court for the Central District of California. Plaintiffs alleged inadequate data security and sought monetary and injunctive relief. loanDepot denied wrongdoing.
The settlement resolved the claims without an admission of liability. People who participated generally released claims covered by the agreement; people who properly opted out were treated differently under the settlement’s terms. The settlement administrator’s important-documents page contains court orders and formal filings.
Free tools Windows power users keep installed
One-click scans. No signup required.
What did the settlement provide?
The approved settlement included several forms of relief:
- A settlement fund for qualifying monetary payments.
- Reimbursement of documented, qualifying out-of-pocket losses fairly traceable to the incident, potentially up to $5,000 per eligible claimant under the settlement rules.
- Financial monitoring and identity-theft insurance services.
- A possible additional payment for qualifying California subclass members.
- Security and business-practice changes described as having more than $9 million in value.
The amount any claimant could receive depended on participation, approved claims, documentation and the remaining net settlement fund. “Up to $5,000” was not an automatic payment, and the available sources do not establish a single guaranteed amount or a reliable current distribution date.
Rank #3
- P-4 Level Security: Crosscut shredder for home office heavy duty can handle 12 sheets effortlessly per pass, make sure your important documents are securely shredded, can shred paper, credit card, staple or clips into 13/64*51/64 inches (5*20mm) tiny particles.
- 6-Minute Continuous Shredding: Based on the patented cooling system, Bonsaii paper shredder for home use heavy duty can run continuously for up to 6 minutes without worrying about overheating or slowing down, ideal paper shredder for home office use or small office use.
- Easy Operation & Safe Protection: Auto start/stop and manual-forward/reverse function protect the paper shredder heavy duty from the frustration of paper jams. Overheat protection helps you use paper shredder without worrying and prolong its lifetime. The document shredder will stop working once you lift the head, keeping you safe.
- Compact Sizes: The shredder for home office comes with a portable handle on the shredder head and a 5.5 Gal large transparent window wastebasket; with the compact size of 12.6*7.91*18.3 inches, you can place it in the corner or under the desk, it's perfect for home use or office use.
- Professional Service: Bonsaii provides 1-Year limited warranty for your shredders for home office heavy duty. If you have any questions, please get in touch with us.
loanDepot reported $24.6 million in 2024 incident expenses, net of $35 million in insurance recoveries, in its annual filing. That accounting figure is not a payment promise to consumers.
Can you still file a loanDepot breach claim?
The original claim deadline was May 27, 2025, and it has passed as of August 18, 2026. The settlement website remains useful for documents and contact information, but its continued availability does not mean claims are open.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If you submitted a claim
Use the official administrator contact information to ask about receipt, deficiencies or status. Start at loandepotbreachsettlement.com/contact-us rather than replying to an unexpected message.
If you did not submit a claim
Do not assume you can obtain a payment after the deadline. Avoid companies that promise to “unlock” a late claim for an upfront fee. A new email offering a payment and requesting bank credentials, a password or a Social Security number should be treated as suspicious until independently verified through the official settlement domain.
How to tell whether you were included
Settlement eligibility was tied to receiving an individualized loanDepot breach notice. A person should not infer inclusion merely because they visited loanDepot’s website, received a marketing email, used a lender or broker that may have interacted with loanDepot, saw their name in an online discussion, or received a generic breach message from an unknown sender.
Rank #4
- Basketless paper and plastic shredder for safely destroying material into 0.24 inch wide strips; meets security level P-2 standards
- Fits over most waste baskets; extendable arm max length is 16.7" or 42.4 cm
- Accepts up to 8 sheets of 20-pound bond paper at a time (no need to remove staples or small paper clips)
- Destroys CDs, DVDs, and credit cards (one at a time, through dedicated slot; blades cut each disc into 3 pieces).
- Run time is 2.5 minutes on/15 minutes off (9.84 feet per minute); if shredder runs continuously beyond max run time, it will automatically shut off to protect the motor from overheating
Preserve the original notice, claim number and attachments. Do not send identity documents or account details to an address that cannot be verified through the administrator’s published contact channel.
What affected consumers should do now
1. Review financial accounts
Check bank, mortgage, brokerage and credit-card statements for unfamiliar transactions, new payees, address changes or account activity. Contact the institution through the number on its official website or statement, not a link in an unsolicited message.
2. Secure online accounts
- Change passwords reused on loanDepot-related or financial accounts.
- Use a different, unique password for every important account.
- Enable multifactor authentication wherever it is available.
3. Monitor credit reports
Look for unfamiliar accounts, hard inquiries, address changes and collection activity. Monitoring services can produce alerts, but they do not prevent every type of fraud and are not a substitute for reviewing statements.
4. Choose a freeze or fraud alert
A credit freeze generally provides a stronger barrier against new-credit applications, although you must temporarily lift it when applying for credit. A fraud alert is less restrictive but usually provides less control. Use official bureau pages:
5. Document and report identity theft
Keep dates, account numbers, correspondence, police or agency reports and receipts for expenses. Notify the affected financial institution promptly and use the federal identity-theft reporting service if you identify fraud. Replacing a Social Security number is not a routine response to breach exposure and is generally difficult.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Best Value
- Crosscut paper and credit card shredder destroys your sensitive documents
- Shreds credit cards, paper clips and staple
- 8-sheet capacity
- 8.7-inch throat width
- Measures 12 x 7 x 16 inche
6. Consider monitoring carefully
The settlement FAQ identifies CyEx by Pango Group/FinancialShield as a settlement-provided monitoring and identity-theft-insurance service; information is available at app.financialshield.com/information/loandepot. loanDepot’s January 2024 announcement also referred to no-cost monitoring and identity protection, including an offer involving Experian. Check whether an existing employer, bank, insurer or settlement benefit already provides equivalent coverage before paying for another service. No monitoring product guarantees prevention or reimbursement.
Key dates and legal status
| Event | Date or detail |
|---|---|
| Unauthorized access | January 3–5, 2024 |
| First public company disclosure | January 8, 2024, referenced in litigation materials |
| Company estimate | Approximately 16.6 million on January 22, 2024 |
| Later notification estimate | Up to approximately 16.9 million |
| Settlement class | Approximately 16,924,007 notified U.S. individuals |
| Claim deadline | May 27, 2025; expired |
| Final approval | August 25, 2025 |
Frequently Asked Questions
Was my information definitely stolen if I received a notice?
No. An individualized notice means loanDepot determined that your information may have been affected. It does not establish that every listed data category was accessed, published or used for identity theft.
Is the $5,000 settlement amount guaranteed?
No. Up to $5,000 applied to documented, qualifying losses under the settlement rules. Payments depended on proof, approved claims, participation and available funds.
Can I submit a claim after May 27, 2025?
The original deadline has passed. Contact the official administrator only to check a previously submitted claim or obtain authoritative information; do not assume a late claim will be accepted.
How can I check whether a settlement email is legitimate?
Do not use its links. Navigate directly to loandepotbreachsettlement.com or its published contact page and compare the message with the official case information. Never provide bank credentials or passwords to an unsolicited sender.
Does credit monitoring stop identity theft?
No. Monitoring can alert you to some new accounts, inquiries or other events, but it cannot prevent every fraud method. Account reviews, strong passwords, multifactor authentication and a credit freeze address different risks.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
