DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Impac Mortgage Holdings, Inc.

bd_c8cc23fa37775230 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 20, 2024

Filed

Mar 27, 2026

To disclose

—

Affected

59state residents only

Linked

5 filings

Confidence

66%
Full breach record for Impac Mortgage Holdings, Inc. →6 incidents on file

Impac Mortgage Holdings, Inc. notified Nebraska residents of a data breach involving unauthorized access to systems containing names and Social Security numbers. The unauthorized access occurred between February 21, 2024, and March 20, 2024. Impac identified the access on March 20, 2024, and notified federal law enforcement. Notices were sent to 59 Nebraska residents on March 27, 2026, offering 12 months of credit monitoring.

Incident timeline

undetected · 28 days

Feb 21, 2024

Begins

Mar 20, 2024

Discovered

Mar 27, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGMar 27 · first
Nebraska State AGMar 27 · first · this page
Oregon State AG+21d
Washington State AG+21d
Massachusetts State AG+21d

Pattern: first filing Mar 27 (IN), last Apr 17 (MA) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.