Oregon has joined forces with financial watchdogs from across 53 states and territories to impose a hefty $20 million penalty on Bayview Asset Management LLC, and its affiliates Lakeview Loan Servicing, Community Loan Servicing, and Pingora Holdings, collectively known as the Bayview Companies. This move comes after these mortgage servicers were found to be lacking in cybersecurity measures and not fully cooperative with state regulatory demands following a significant data breach, which affected over 5.8 million customers nationwide, including more than 95,000 in Oregon itself.
The coordinated crackdown emphasizes the importance for companies to vigorously adhere to consumer data protection and regulatory compliance. As part of the fallout, the Bayview Companies are also required to implement corrective actions. "State collaboration is crucial when addressing data breaches of this scale," explained TK Keen, the Division of Financial Regulation (DFR) administrator, in a statement detailed by the official Oregon DFR news release. "Thank you to the states that led this action. Oregon will continue to help in any way possible to protect consumers’ important information."
This multistate investigation, spearheaded by California, Maryland, North Carolina, and Washington state, discovered that the Bayview Companies' practices did not to meet up to par with either federal or state standards. The companies also exacerbated the situation by failing to quickly and thoroughly comply with state requests early in the examination process, further impeding the supervisory efforts.
Along with the financial punishment, the Bayview Companies have agreed to bolster their cybersecurity programs, undergo independent scrutiny, and provide consistent reports to the states for the next three years. It's crucial for financial institutions, particularly nonbank entities, which includes mortgage companies, money services businesses, consumer finance providers, and debt collectors, to stand up to the rigorous licensing and supervising standards set forth by state financial regulators via the Nationwide Multistate Licensing System (NMLS).
For individuals looking to check on the credentials of companies in this sector or to dig into their past regulatory interactions, the NMLS Consumer Access portal offers a way to verify if a company is licensed to do business in Oregon and to review any enforcement actions against them. More information can be found by visiting the NMLS Consumer Access website.
.jpg){kind=link}