Your Cookies are Disabled! sets cookies on your computer to help improve performance and provide a more engaging user experience. By using this site, you accept the terms of our cookie policy. Learn more.

DocuSign email database hacked; NSAs should watch for fake messages

DocuSign Email Database Hacked; NSAs Should Beware Fake Emails

DocuSign, a leading provider of electronic signature technology for the mortgage industry, warned customers this week to look out for fake “phishing” messages containing malicious software after confirming that “a malicious third party had gained temporary access” to a communication system containing a list of email addresses.

DocuSign, in a post on its website, stressed that no other information, such as names, addresses, Social Security numbers and credit card data, was compromised.

The company warned users to be on the lookout for “phishing” emails that appear to be from DocuSign, but are actually fakes that try to trick recipients into opening an attached document file that installs malicious software on the reader’s device when clicked. The company said many of the fake emails include the subject lines:

“Completed: [domain name]  – Wire transfer for recipient-name Document Ready for Signature” or

“Completed [domain name/email address] – Accounting Invoice [Number] Document Ready for Signature.”

Signing Agents should not open any emails or file attachments claiming to be from DocuSign that they were not expecting, or that include misspellings or directions to click on a suspicious link. Instead, DocuSign advises forwarding the unopened email to them at, then deleting the email from your computer or device.

During a mortgage industry panel discussion last year at NNA 2016 in Anaheim, California, Bill Burding, Executive Vice President of Orange Coast Title Company, warned that cyber criminals target emails from Notary Signing Agents during real estate transactions and sometimes send phony messages to trick NSAs into providing a borrower’s private information.

Panelists advised Notary Signing Agents who suspect an email breach during a loan document signing to report it immediately to the agency that provided the assignment. NSAs were also advised to use strong passwords and encryption protection for their electronic devices and email accounts, and also avoid using public wireless networks that are vulnerable to hacking.

David Thun is the Assistant Managing Editor with the National Notary Association.

Related Articles:

Protecting you and your signers from data breaches

NSA Tip: Keeping your mobile devices safe

Additional Resources:

Notary Signing Agent Self Assessment


Add your comment

Mike aPetercheff

22 May 2017

Great Info.

Pierre Burton

22 May 2017

This is very useful information. Thanks for the alert.

Leave a Comment

Required *

All comments are reviewed and if approved, will display.