NOTICE OF A DATA SECURITY INCIDENT

On August 8, 2021, Primary Residential Mortgage, Inc. (“PRMI”) identified and addressed a data security incident involving unauthorized access to some of our systems. Upon discovering the incident, we took immediate action, and brought certain servers offline to isolate the impact. We also initiated a thorough investigation, notified law enforcement, and engaged third-party cybersecurity firms to assist and help further enhance the security of our systems.

Our investigation determined that an unauthorized party accessed or acquired certain data that was stored on our systems during the incident. We reviewed the data that was potentially accessed or acquired during the incident and, on September 27, 2021, determined that some of the data included the personal information of some individuals affiliated with PRMI including a limited number of borrowers’ and employees’ personal information that we collect. The type of information identified includes individuals’ names, Social Security numbers, driver’s license numbers, and state or government identification numbers.

For employees and borrowers whose information may have been involved, we recommend that they remain vigilant and review credit reports and financial account statements for any unauthorized access over the next 12 to 24 months. If they see charges or any unauthorized activity they should notify the relevant financial institution immediately. Additionally, for eligible individuals whose Social Security numbers and/or Driver’s License numbers may have been involved in the incident, we are offering complimentary credit monitoring and identity protection services through IDX.

We take this incident very seriously and sincerely regret any concern this may cause. To help prevent something like this from happening again, we have implemented additional security safeguards. A dedicated call center has been established to answer any questions about this incident. If you believe you have been affected by this incident but have not received a letter by October 30, 2021, please call the dedicated call center at (833) 989-3937, Monday through Friday, between 8:00 a.m. and 5:30 p.m., Mountain Time.