Social EngineeringRetail & ConsumerRetailPhishingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

LENNAR CORPORATION

bd_e605006484c517d5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 30, 2026

Filed

Aug 11, 2026

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for LENNAR CORPORATION →2 incidents on file

Lennar Corporation notified the Nebraska Attorney General of a privacy event involving unauthorized access to its systems between March 24 and March 30, 2026. The breach affected one Nebraska resident, exposing names, contact info, SSNs, government IDs, and financial account data. Lennar engaged forensic investigators, reported to law enforcement, and provided 24 months of Kroll identity monitoring services to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

Mar 24, 2026

Begins

Mar 30, 2026

Discovered

Aug 11, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_4aeea9b82b95753e2026-08-11Verified
California State AGbd_bbc725daceacaa182026-08-11Candidate
Texas State AGbd_9710d642d008341d2026-08-14 · +3dVerified

Name: LENNAR CORPORATION
norm: lennar
Domain: lennar.com

Name: LENNAR CORPORATION
norm: lennar
Domain: lennar.com
Industry: Retail & Consumerllm

Discovered: Mar 30, 2026
Breach occurred: Mar 24, 2026 – Mar 30, 2026
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 11, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: reporting the Event to relevant regulators, including this office
Initial access: phishing_link

During the incident: Took steps to secure its systems
Investigate the extent of this activity with the assistance of a third-party forensics team
Reported the Event to law enforcement
Implemented additional technical security measures to further protect its systems
Placed a legal notice in USA Today and on its primary website
Secured the services of Kroll to provide 24 months of identity monitoring services
Changes made: Implemented additional technical security measures to further protect its systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGAug 11 · first

California State AGAug 11 · first

Nebraska State AGAug 11 · first · this page

Texas State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/267019e8-490c-441d-a7f2-ef0013c3302f.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 11, 2026
Raw hash: 6c4440c3c89e57026fc015893be0777494ac7526769aeeb39a8831d9fe5636fd

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityLENNAR CORPORATION

Victim entityLENNAR CORPORATION

Incidentdiscovered Mar 30, 2026

Stated responseTook steps to secure its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov