Cornerstone First Mortgage reported a data breach that occurred in July or August 2023 but was not discovered until September 2025. The breach was publicly reported in March 2026, with an official notification submitted to the Massachusetts Office of Consumer Affairs and Business Regulation (OCABR).
The exposed data types include Social Security numbers, names, dates of birth, addresses, government IDs, medical information, and financial information. At least 73 Massachusetts residents have been confirmed affected, though the company operates in 49 states, suggesting potentially more individuals could be impacted. The exact method of the breach and who was responsible have not been specified by the company.
Details can continue to emerge as investigations proceed, and notification timelines can vary.