What makes you think they didn't report it?
They might have reported it to the SEC - like I did when I discovered, per their production database, that Argent had fabricated/falsified thousands of FICO scores on their loan apps...
...only to have the "investigation" go mysteriously cold.
So, willing to stipulate into the record that significant players in the mortgage bidness were unregulated yet?
What is/was your association with the industry?
I force people like you to build secure systems.