HackingFinancial ServicesFinanceCustomer Data InvolvedFinancial accountIdentity (basic)Government IDHighContained

PLAZA HOME MORTGAGE, INC.

bd_632f658ed72eb643 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 17, 2026

Filed

Jun 17, 2026

To disclose

17 weeks

Affected

4,033state residents only

Linked

12 filings

Confidence

64%

Full breach record for PLAZA HOME MORTGAGE, INC. →

Plaza Home Mortgage, Inc. experienced unauthorized access to an employee's computer on February 17, 2026. Threat actors illegally accessed information systems, potentially obtaining names, addresses, SSNs, birth dates, driver's license numbers, and mortgage loan application data. The company contained the attack, launched an investigation, and implemented additional security measures. Affected individuals are offered 18 months of credit monitoring and identity theft services.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d17 weeks discovery → filing

Incident timeline

discovery → filing · 17 weeks / 120 days

Feb 17, 2026

Begins

Feb 17, 2026

Discovered

Jun 17, 2026

Filed

vs. sector median

+9 wks slower

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesilentransomgroupbd_a6e8441966812c0c2026-02-27 · +109dCandidate

Regulatory filings (9) · sorted by filing gap

New Hampshire State AGbd_452429ca9a0fc4b82026-06-11 · +6dVerified by operator
Texas State AGbd_87ba392247de474e2026-06-09 · +8dVerified
California State AGbd_2c33570cae2916332026-06-05 · +12dVerified
Oregon State AGbd_a8339956aa83bb852026-06-05 · +12dVerified

Show 5 more filings ↓up to 19d gap

Maine State AGbd_c1a623e388a3a78f2026-06-05 · +12dCandidate
Washington State AGbd_e5229764cc84dd6a2026-06-05 · +12dCandidate
Illinois State AGbd_442e170726b496c72026-06-01 · +16dVerified
Indiana State AGbd_08868d749599b3232026-05-29 · +19dVerified by operator
Nebraska State AGbd_363e67a782dce0072026-05-29 · +19dVerified by operator

Showing first 10 of 11 linked disclosures.

Name: PLAZA HOME MORTGAGE, INC.
norm: plaza home mortgage
Domain: plazahomemortgage.com

Name: PLAZA HOME MORTGAGE, INC.
norm: plaza home mortgage
Domain: plazahomemortgage.com
Industry: Financial Servicesllm

Discovered: Feb 17, 2026
Breach occurred: Feb 17, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 19, 2026
Affected individuals: 4,033state-resident count only
Data types: Financial accountIdentity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Launched an investigation
Removed the threat actor from our systems
Implemented additional organizational, technical and administrative security measures
Changes made: Implemented additional organizational, technical and administrative security measures to prevent the reoccurrence of this security incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(120 days from discovery to filing)
Compliance flags: MA AG >90dLeak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Indiana State AGMay 29 · first

Nebraska State AGMay 29 · first

Illinois State AG+3d

California State AG+7d

Oregon State AG+7d

Maine State AG+7d

Washington State AG+7d

Texas State AG+11d

New Hampshire State AG+13d

Massachusetts State AG+19d · this page

Pattern: first filing May 29 (IN), last Jun 17 (MA) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-989-plaza-home-mortgage-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 17, 2026
Raw hash: 48e2484c46f8e4f444cc26fa882b80d0edb021898ffbcda134dec7ec909243a9

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityPLAZA HOME MORTGAGE, INC.

Victim entityPLAZA HOME MORTGAGE, INC.

Incidentdiscovered Feb 17, 2026

Stated responseLaunched an investigation

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov