Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsTargetedCustomer Data InvolvedAuthenticationFinancial accountIdentity (basic)Government IDHighContained

PLAZA HOME MORTGAGE, INC.

bd_e5229764cc84dd6a · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 17, 2026

Filed

Jun 5, 2026

To disclose

15 weeks

Affected

9,598state residents only

Linked

12 filings

Confidence

69%

Full breach record for PLAZA HOME MORTGAGE, INC. →

Plaza Home Mortgage Inc. reported a phishing-based security incident affecting Washington residents. Unauthorized access to an employee's computer occurred on February 17, 2026, exposing names, SSNs, DOBs, driver's licenses, and mortgage loan data. 9,598 individuals were notified. The company engaged CyEx for credit monitoring and implemented additional security measures.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d15 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 15 weeks / 108 days

Feb 17, 2026

Begins

Feb 17, 2026

Discovered

Jun 5, 2026

Filed

vs. sector median

+7 wks slower

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesilentransomgroupbd_a6e8441966812c0c2026-02-27 · +97dCandidate

Regulatory filings (9) · sorted by filing gap

California State AGbd_2c33570cae2916332026-06-05Verified
Oregon State AGbd_a8339956aa83bb852026-06-05Verified
Maine State AGbd_c1a623e388a3a78f2026-06-05Candidate
Texas State AGbd_87ba392247de474e2026-06-09 · +4dVerified

Show 5 more filings ↓up to 12d gap

Illinois State AGbd_442e170726b496c72026-06-01 · +4dVerified
New Hampshire State AGbd_452429ca9a0fc4b82026-06-11 · +6dVerified by operator
Indiana State AGbd_08868d749599b3232026-05-29 · +7dVerified by operator
Nebraska State AGbd_363e67a782dce0072026-05-29 · +7dVerified by operator
Massachusetts State AGbd_632f658ed72eb6432026-06-17 · +12dVerified

Showing first 10 of 11 linked disclosures.

Name: PLAZA HOME MORTGAGE, INC.
norm: plaza home mortgage
Domain: plazahomemortgage.com

Name: PLAZA HOME MORTGAGE, INC.
norm: plaza home mortgage
Domain: plazahomemortgage.com
Industry: Financial Servicesllm

Discovered: Feb 17, 2026
Breach occurred: Feb 17, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 5, 2026
Affected individuals: 9,598state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDriver's licence numberDate of birthUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Took immediate actions to remove the threat actor from our systems
Implemented additional organizational, technical and administrative security measures
Retained CyEx, a specialist in identity theft prevention to provide you with 12 months of credit monitoring services and identity theft services
Changes made: Implemented additional organizational, technical and administrative security measures to prevent the reoccurrence of this security incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(108 days from discovery to filing)
Compliance flags: WA AG >90dLeak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Indiana State AGMay 29 · first

Nebraska State AGMay 29 · first

Illinois State AG+3d

California State AG+7d

Oregon State AG+7d

Maine State AG+7d

Washington State AG+7d · this page

Texas State AG+11d

New Hampshire State AG+13d

Massachusetts State AG+19d

Pattern: first filing May 29 (IN), last Jun 17 (MA) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA41235.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 5, 2026
Raw hash: 759a450a4d4881626bb8fe661493f776981a93c5d963531a67a11c021f96e72b

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityPLAZA HOME MORTGAGE, INC.

Victim entityPLAZA HOME MORTGAGE, INC.

Incidentdiscovered Feb 17, 2026

Stated responseTook immediate actions to remove the threat actor from our systems

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com