New American Funding - Full leak published Listed by everest Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On July 24, 2025, the ransomware group known as everest listed New American Funding on its leak site and claimed that a full leak of internal files had been published following a ransomware attack. Public detail remains limited: the number of people affected is unknown, and the precise contents of the files have not been independently confirmed beyond the group's assertion that internal material was exfiltrated.

For a mortgage lender that handles sensitive financial and personal records across the United States, any such claim raises immediate questions about the exposure of customer information and the practical steps individuals should take while further verification is pending.

What happened

According to the available record, New American Funding was listed by the everest ransomware group with the notation that a full leak had been published. The incident is described as involving the exfiltration of internal files in a ransomware attack. The report date is July 24, 2025. No further public details have been released on the exact timing of the intrusion, the method of initial access, the volume of data taken, or any ransom demand. The number of people potentially affected is listed as unknown. The group's leak-site listing constitutes a claim; independent confirmation of the full scope has not been provided in the available facts.

Inside everest

Everest is a ransomware operation that follows the now-common double-extortion model: after encrypting systems, the group also steals data and threatens to publish it on a dedicated leak site if payment is not made. Public reporting on the group over recent years has documented its practice of posting victim names, sample files, and eventually larger archives when negotiations stall. Everest has previously claimed responsibility for attacks on organizations across multiple sectors, using the visibility of its leak site to pressure victims. In this case, the group claims that New American Funding suffered a full leak of internal files. No additional statements attributed specifically to everest about this victim appear in the provided record beyond that listing.

Who is New American Funding?

New American Funding is a family-owned mortgage lender founded in 2003. It provides home loans throughout the United States and offers a range of products that include first-time home-buyer programs, VA loans, FHA loans, HARP, conventional mortgages, and jumbo loans. The company has also been noted for real-estate financing aimed at under-served communities. As a mortgage originator and servicer, it routinely collects and stores detailed personal and financial information required for underwriting and loan administration. A breach involving such an organization is consequential because the data it holds can be used for identity theft, fraudulent loan applications, or long-term financial harm if it reaches unauthorized parties.

What data was at risk

The facts state that internal files were exfiltrated in a ransomware attack. Exact data types beyond that description have not been disclosed. Organizations of this kind typically maintain customer names, addresses, Social Security numbers, income documentation, credit reports, bank-account details, property records, and loan files. Whether any or all of those categories were present in the material claimed by everest remains unconfirmed. Public detail is limited to the assertion of internal-file exfiltration; no inventory of specific fields or file counts has been released.

The real-world impact

If customer or employee records were among the internal files, affected individuals could face elevated risks of identity theft, phishing campaigns tailored with accurate personal details, or attempts to open new credit accounts. Mortgage-related data can also enable more sophisticated fraud, such as attempts to refinance or sell properties without the owner's knowledge. For the organization itself, the incident may bring regulatory scrutiny, notification obligations under state and federal privacy laws, potential civil claims, and lasting reputational damage among borrowers who trust lenders with highly sensitive financial histories. Because the number of people affected is unknown and the precise contents remain unverified, the full scale of these risks cannot yet be quantified.

Were you affected?

Anyone who has applied for or held a mortgage through New American Funding should treat the claim seriously while awaiting official confirmation. Practical first steps include:

• Monitor credit reports from the major bureaus for unexpected inquiries or new accounts.
• Place a fraud alert or credit freeze if you notice suspicious activity.
• Watch for phishing emails or calls that reference your mortgage or personal details.
• Review bank and loan statements for unauthorized changes.
• Consider a free exposure scan of your email address to check whether your information has already appeared in known breach data sets.

Official notifications, if required, will come directly from the company or regulators. Until more verified information emerges, these precautions remain the most useful response available to individuals.

AICompiled with AI assistance from public sources and published under our editorial standards.