The story is what happens in the silence afterward, and how much of that silence is a choice. The long tail of a loan fileStart with what makes mortgage data uniquely toxic when it leaks. A breach at a mortgage company isn’t a snapshot of current customers. Nearly every state breach notification statute triggers on discovery, when the organization knew or should have known, not on the completion of the forensic report. Every day of silence is a day they don’t know to freeze their credit, and a day the company chooses silence, letting the story be written for them.