HackingFinancial ServicesFinanceCustomer Data InvolvedEmployee Data InvolvedData ExfiltratedPIIIdentity (basic)Government IDCredentialsFinancialMediumContained

PLAZA HOME MORTGAGE, INC.

bd_2c33570cae291633 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 5, 2026

To disclose

—

Affected

Not disclosed

Linked

12 filings

Confidence

82%

Full breach record for PLAZA HOME MORTGAGE, INC. →

Plaza Home Mortgage, Inc. experienced unauthorized access to one employee's computer on or around February 17, 2026. Threat actors illegally accessed company information systems. Affected data includes customer and employee names, addresses, SSNs, dates of birth, driver's licenses/government IDs, mortgage loan information, and employee usernames/passwords. The company took immediate action to remove the threat actor, launched an investigation, and retained CyEx to provide 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 17, 2026

Begins

Jun 5, 2026

Filed

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesilentransomgroupbd_a6e8441966812c0c2026-02-27 · +97dCandidate

Regulatory filings (9) · sorted by filing gap

Oregon State AGbd_a8339956aa83bb852026-06-05Verified
Maine State AGbd_c1a623e388a3a78f2026-06-05Candidate
Washington State AGbd_e5229764cc84dd6a2026-06-05Candidate
Texas State AGbd_87ba392247de474e2026-06-09 · +4dVerified

Show 5 more filings ↓up to 12d gap

Illinois State AGbd_442e170726b496c72026-06-01 · +4dVerified
New Hampshire State AGbd_452429ca9a0fc4b82026-06-11 · +6dVerified by operator
Indiana State AGbd_08868d749599b3232026-05-29 · +7dVerified by operator
Nebraska State AGbd_363e67a782dce0072026-05-29 · +7dVerified by operator
Massachusetts State AGbd_632f658ed72eb6432026-06-17 · +12dVerified

Showing first 10 of 11 linked disclosures.

Name: PLAZA HOME MORTGAGE, INC.
norm: plaza home mortgage
Domain: plazahomemortgage.com
Industry: Mortgage lending / financial services

Name: PLAZA HOME MORTGAGE, INC.
norm: plaza home mortgage
Domain: plazahomemortgage.com
Industry: Mortgage lending / financial services
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Feb 17, 2026
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDCredentialsFinancial
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified California Attorney General (SB-24 breach notification filed)

During the incident: Promptly launched an investigation upon discovering that threat actors accessed personal information
Took immediate actions to remove the threat actor from our systems
Implemented other security measures to further secure our information systems and personal information
Retained CyEx, a specialist in identity theft prevention to provide 12 months of credit monitoring services and identity theft services, free of charge
Changes made: Implemented additional organizational, technical and administrative security measures to prevent the reoccurrence of this security incident and to protect the personal information of customers
Implemented additional organizational, technical and administrative security measures to prevent the reoccurrence of this security incident and to protect the personal information of employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Indiana State AGMay 29 · first

Nebraska State AGMay 29 · first

Illinois State AG+3d

Oregon State AG+7d

Maine State AG+7d

Washington State AG+7d

California State AG+7d · this page

Texas State AG+11d

New Hampshire State AG+13d

Massachusetts State AG+19d

Pattern: first filing May 29 (IN), last Jun 17 (MA) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-624434
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 5, 2026
Raw hash: a901b889744d1f127b77a054143e2dfec2d3e21adb02bc910c2d08af95db0b1e

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityPLAZA HOME MORTGAGE, INC.

Victim entityPLAZA HOME MORTGAGE, INC.

IncidentUnauthorized Access

Stated responsePromptly launched an investigation upon discovering that threat actors accessed personal information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov