Friday, April 25, 2008

LendingTree.com: "When Banks Compete, Your Identity May Be at Risk…"

LendingTree, an online leads company that purports to help consumers shop around for the best mortgage deals, recently admitted in a letter to customers that some of their former employees helped unauthorized mortgage lenders hack into their databases. Customer information collected between 2006 and 2008 – including personal data often used to conduct identity theft, such as name, address, Social Security number, income and employment information – was stolen.

While they say the information was merely used to market mortgage loans, not to commit identity theft, the fact remains that LendingTree's lax security measures contributed to a significant data breach that may very well increase the likelihood that their customers will become identity theft victims.

According to the letter, LendingTree did not disable the passwords of their former employees, some of whom shared the confidential login information with unauthorized lenders who then tapped into the databases to "access LendingTree's customer loan request forms."

LendingTree's Response

LendingTree would not confirm the number of customers affected, and is not offering much in the way of compensation or solutions. They recommended that their customers use their "free annual credit report" benefit to check their credit report for any suspicious activity and monitor their credit reports for the next 24 months.

LendingTree also has filed lawsuits against three small home loan companies based in California in connection with the data breach.

Criticism of LendingTree Practices

Much criticism has been leveled against the leads company for the way it conducts business. Some customers claim that when they selected to have four lenders review their application, LendingTree actually sent it to 10… or more.

Other consumers reported that they started the application process, but changed their minds mid-way. Yet LendingTree sold their incomplete applications – and they started getting bombarded with calls.

"I have worked for 2 big mortgage companies and a broker," wrote one mortgage broker. "I've learned that LendingTree not only sells your information to 2 or 3 lenders, they sell it to other small lenders and broker shops. And then after a while, they resell your information again so they can have continuous profit. If you ever applied with LendingTree, make sure that you have read the Terms & Agreement. They sell it to anyone that can possibly help you."

Some complained that they had so many inquiries generated on their credit reports that their credit score dropped by 60-100 points. Hard inquiries are inquiries where a potential lender is reviewing your credit because you've applied for credit with them. These include credit checks when you've applied for an auto loan, mortgage or credit card. Each of these types of credit checks count as a single inquiry. One exception occurs when you are "rate shopping". That's a smart thing to do, and your FICO score considers all inquiries within a 2 week period for an auto or mortgage as a single inquiry.

However, because LendingTree doesn't just sell information to a handful of lenders one time – they sell them repeatedly over a long period of time – this can, in fact, contribute to a decreased credit score.

Jackie Story – Are You Out There?

For four years, your Credit Mama has fielded phone calls from mortgage brokers and call centers all over the world looking for "Jackie Story." Apparently Jackie Story used to have my cell phone number. It didn't take long for me to figure out that she used LendingTree to apply for a mortgage or refinance. What did surprise me, though, was the sheer number of phone calls I received long after the first few rolled in.

At some point I finally started telling the callers that they had wasted their money by purchasing very old, very useless leads. I still wonder, though, if Jackie Story ever got that low interest rate she was looking for, and if her credit has been negatively impacted by all of the people who received her original application and tried to process it.

It's Not Just LendingTree

What many people don't know is that your information can also be purchased from the credit bureaus. "Trigger leads" – leads generated when you apply for a mortgage – plague mortgage brokers. When you apply for a mortgage, your phone number and address are sold by the credit bureaus to other mortgage companies. That's why many applicants begin receiving volumes of solicitations from companies they have never heard of.

Be wary of any lead company, such as LendingTree.com or LowerMyBills.com. And if you do not wish to receive pre-approved or pre-screened offers for credit or insurance, the Fair Credit Reporting Act allows you to "opt out" of receiving them. To opt-out, call toll free to 1-888-567-8688 or visit optoutprescreen.com.