On March 30, 2026, Lennar Corporation discovered a potential issue affecting a portion of its information systems. The company secured its systems and initiated an investigation with a third-party forensics team. The investigation revealed that an unauthorized party used social engineering tactics to access some of Lennar's systems between March 24 and March 30, 2026.
A thorough assessment, concluded on July 30, 2026, determined that sensitive personal information was involved in the breach. Exposed data included names, contact information, dates of birth, Social Security numbers, passport or other government ID information, driver’s license or other state ID information, financial account information, health insurance IDs, and medical-related information. At least one Nebraska resident was affected, based on a Nebraska Attorney General disclosure.
Lennar began notifying affected individuals on August 11, 2026. Details regarding the full scope of individuals affected may emerge as investigations continue and notifications are processed.