US Mortgage Corporation, a mortgage lender, experienced a ransomware data breach between May 13-14, 2025. The company detected unauthorized activity on May 14, 2025. This incident was publicly disclosed when the company started mailing notification letters to affected individuals on March 5, 2026, and reported it to the New Hampshire Attorney General's Office.
The breach involved various types of sensitive data, including names, contact information, dates of birth, Social Security numbers, driver's license numbers, financial account details (mortgage accounts), and limited protected health information (medical/insurance data). While at least four New Hampshire residents were confirmed affected, the total number of affected individuals nationwide has not been disclosed, though implied to be more given the company's 24 lending offices. US Mortgage Corporation is offering complimentary Experian IdentityWorks credit monitoring to those whose SSN or driver's license numbers were exposed.
Details can emerge as investigations continue, and notification processes may be delayed.