First Rate Financial, a financial services company specializing in mortgage brokerage, experienced a data breach in late 2025, which was publicly reported on May 6, 2026. A ransomware group, LockBit 5.0, claimed responsibility for data theft on December 16, 2025. The company disclosed the breach through regulatory filings with the Massachusetts and Vermont Attorneys General.
The breach involved various types of personal information, including names, Social Security numbers, dates of birth, addresses, government identification numbers, driver's licenses, financial account codes, credit or debit account information, medical information, and financial information. The number of affected individuals has not been publicly reported, but disclosures were made in Massachusetts and Vermont, and nationwide impact is implied for consumers who applied for mortgages or home loans.
Details surrounding the breach may continue to emerge. Companies are often delayed in providing full information after an incident.