Mortgage Educators and Compliance (MEC), operated by 360training.com, experienced a data breach disclosed in February 2026, affecting over 24,000 individuals. The company detected an unauthorized script on November 26, 2025, which was sending credit card data to an uncontrolled Google Analytics account. Customers who purchased courses during a specific period were notified starting in February 2026, and notice was submitted to the Maine Attorney General.
The breach involved the exposure of names and credit card numbers. While over 24,000 individuals were affected, the exact number of individuals notified has not been explicitly stated. No evidence suggests the exposure of SSN, medical, or other financial data beyond credit cards. The full extent of data acquired remains unclear.
Details of data breaches can emerge over time, and notification processes may be delayed.