UnknownFinancial ServicesFinanceCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDFinancialMediumContained

Cornerstone First Mortgage

bd_c65fd6cef57089fd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 1, 2025

Filed

Mar 5, 2026

To disclose

26 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Cornerstone First Mortgage →

Cornerstone First Mortgage LLC notified Massachusetts residents of a data breach involving personal information. The incident occurred in July or August 2023 and was discovered in September 2025. The company is offering 24 months of free credit monitoring via Kroll. No specific attack vector or data types were detailed beyond general personal information.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d26 weeks discovery → filing

Incident timeline

undetected · 793 days

discovery → filing · 26 weeks / 185 days

Jul 1, 2023

Begins

Sep 1, 2025

Discovered

Mar 5, 2026

Filed

vs. sector median

+18 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Cornerstone First Mortgage
norm: cornerstone first mortgage
Domain: cfmtg.com

Name: Cornerstone First Mortgage
norm: cornerstone first mortgage
Domain: cfmtg.com
Industry: Financial Servicesllm

Discovered: Sep 1, 2025
Breach occurred: Jul 1, 2023 – Aug 31, 2023
Undetected for: 793 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 4, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial
Attack vector: Unknown

During the incident: Offering credit monitoring services by Kroll for a period of twenty-four (24) months from the date of this letter, at no cost to you
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(185 days from discovery to filing)
Compliance flags: MA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-326-cornerstone-first-mortgage/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 5, 2026
Raw hash: 1e6c61237877cee63b5f7057354b42a8783aa623dd60f495786f6221bc585f01

Reporting entityCornerstone First Mortgage

Victim entityCornerstone First Mortgage

Incidentdiscovered Sep 1, 2025

Stated responseOffering credit monitoring services by Kroll for a period of twenty-four (24) months from the date of this letter, at no cost to you

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov