HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
PLAZA HOME MORTGAGE, INC.
bd_632f658ed72eb643 · schema v1 · pii pii-v1
Full breach record for PLAZA HOME MORTGAGE, INC. →Plaza Home Mortgage, Inc. notified Massachusetts residents of a security incident occurring around February 17, 2026, involving unauthorized access to an employee's computer. The breach potentially exposed personal information including names, addresses, Social Security numbers, birth dates, driver's license numbers, and mortgage loan application data. The company shut down the attack, removed the threat actor, and implemented enhanced security measures. Affected individuals were offered 18 months of credit monitoring and identity theft services through CyEx.
Massachusetts clock✗ MA AG >90d15 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 7 about the same incident.View merged incident
A leak claim by silentransomgroup about this victim predates this filing by 93 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_a6e8441966812c0cLeak Sitesilentransomgroupfiled 2026-02-27(93d gap)Candidate
Regulatory filings (5) · sorted by filing gap
- bd_2c33570cae291633California State AGfiled 2026-06-05(4d gap)Verified
- bd_a8339956aa83bb85Oregon State AGfiled 2026-06-05(4d gap)Verified
- bd_c1a623e388a3a78fMaine State AGfiled 2026-06-05(4d gap)Candidate
- bd_e5229764cc84dd6aWashington State AGfiled 2026-06-05(4d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 8d gap
- bd_87ba392247de474eTexas State AGfiled 2026-06-09(8d gap)Verified
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-989-plaza-home-mortgage-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2026
- Raw hash
- 48e2484c46f8e4f444cc26fa882b80d0edb021898ffbcda134dec7ec909243a9
Reporting entity
- Name
- PLAZA HOME MORTGAGE, INC.norm: plaza home mortgage
- Domain
- plazahomemortgage.com
Victim entity
- Name
- PLAZA HOME MORTGAGE, INC.norm: plaza home mortgage
- Domain
- plazahomemortgage.com
Incident
- Discovered
- Feb 17, 2026
- Materiality determined
- —
- Notification sent
- May 19, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(104 days from discovery to filing)
- Compliance flags
- MA AG >90dLeak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.