MLD Mortgage Inc., doing business as The Money Store, filed a data breach notification with the California Attorney General in October 2026 confirming unauthorized access to its systems. The exact data types and number of affected individuals have not been publicly disclosed. Anyone who has been a customer should monitor their credit reports and watch for an official notification letter.
| Company | The Money Store |
|---|---|
| Industry | Finance |
| Data Types Exposed | Not Publicly Disclosed |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | California Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the The Money Store Data Breach?
MLD Mortgage Inc., doing business as The Money Store, has disclosed a data breach affecting individuals connected to its mortgage lending operations. The company filed a formal notification with the California Attorney General in October 2026. This filing confirms that unauthorized access to company systems or data occurred at some point before the notice went out.
The exact discovery date has not been publicly disclosed. As a result, the timeline of how long the unauthorized access lasted before the company detected it remains unclear. Mortgage lenders typically store large volumes of sensitive financial and personal records, which makes this kind of incident especially concerning for borrowers.
Because the regulatory filing is brief, many specifics about the method of attack have not been made public. However, the company’s decision to notify California’s Attorney General indicates it has confirmed that personal information was involved. Companies generally only trigger this type of mandatory notification once an internal investigation establishes that a breach meets legal disclosure thresholds.
At this stage, it is not yet known whether forensic investigators identified the specific entry point attackers used. In addition, the filing does not indicate whether law enforcement has been involved. Readers should expect that more details may emerge as the company continues its investigation and issues further updates.
Who was affected?
The population affected by this breach has not been specified in available records. Typically, incidents like this affect current and former mortgage customers, loan applicants, or other individuals whose information was on file with the lender. Because The Money Store operates as a residential mortgage company, affected individuals likely include borrowers across multiple states.
The exact number of individuals impacted has not been publicly disclosed. This means that both the scope and geographic spread of the breach remain uncertain for now. Until MLD Mortgage Inc. releases more specific figures, affected individuals should assume they could be included if they have ever applied for or held a mortgage through the company.
It is also unclear whether employees, in addition to customers, had their information exposed. Because mortgage applications often require detailed financial and identification documents, both current and past customers face potential risk. Anyone who has interacted with The Money Store in recent years should stay alert for a notification letter.
What Information Was Potentially Exposed?
The specific types of information involved in this breach have not been publicly disclosed. The regulatory filing confirms that a breach occurred, but it does not list the categories of data affected. For this reason, affected individuals should not assume any particular data type was or was not part of the incident.
Even without confirmed details, mortgage lenders routinely handle financial account numbers, identification documents, and other personal records. As a result, a breach at a mortgage company carries meaningful risk regardless of which specific categories were involved. This uncertainty makes vigilance especially important for anyone who has done business with the lender.
Identity theft is one of the most common outcomes following a financial sector data breach. If attackers gained access to any personal identifiers, they could use that information to open fraudulent accounts or file false applications. Because mortgage transactions already require extensive documentation, any exposure involving this sector deserves a cautious response.
Financial fraud is another realistic concern when a lender experiences unauthorized access. For example, stolen information could be used to attempt fraudulent loan applications or unauthorized account changes. Since the precise data categories remain undisclosed, affected individuals should monitor their accounts broadly rather than focus on one specific type of fraud.
What is the company doing?
MLD Mortgage Inc. has taken the step of formally notifying the California Attorney General about this incident. This filing is a required legal action once a company confirms a qualifying data breach. The company also filed formal notification with the California Attorney General, which is a standard part of breach response under state law.
Beyond this filing, the publicly available record does not detail additional remediation steps. It is not yet known whether the company has offered credit monitoring or identity protection services to affected individuals. Likewise, there is no public information confirming whether the company has completed a full forensic investigation.
Going forward, affected individuals should watch for a direct notification letter from the company. This letter would typically outline specific protective measures, if any are being offered. Because details remain limited, consumers should rely on official correspondence from MLD Mortgage Inc. rather than assumptions about the company’s response.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Anyone who has done business with The Money Store should check their credit reports regularly. This habit helps catch unauthorized accounts or inquiries early. You can request free reports from all three major credit bureaus and review them for anything unfamiliar.
In addition, consider spacing out your requests throughout the year so you have ongoing visibility into your credit file. Because breach details remain unclear, continuous monitoring is more useful than a single check. If you spot suspicious activity, report it to the credit bureau immediately.
Consider a Fraud Alert or Credit Freeze
Placing a fraud alert on your credit file can make it harder for identity thieves to open new accounts in your name. This step is especially useful when a financial institution reports a breach, since mortgage lenders handle highly sensitive data. A fraud alert is free and generally lasts one year.
For stronger protection, you may also consider a full credit freeze. This option restricts access to your credit file entirely, which stops most new account fraud attempts. While freezing credit takes a few extra steps when you apply for new credit yourself, it offers the most reliable defense against unauthorized account openings.
Watch for Phishing and Suspicious Communications
After any data breach, scammers often attempt to exploit public awareness of the incident. Therefore, be cautious of unexpected emails, texts, or calls claiming to be from The Money Store or related financial services. Never click links or provide personal details unless you can verify the sender’s legitimacy.
Instead, if you receive a message referencing this breach, contact the company directly using a verified phone number or website. This approach prevents you from accidentally providing information to a scammer. Because phishing attempts often increase after a breach becomes public, extra caution now is worthwhile.
Review Financial and Loan Statements Regularly
Because The Money Store is a mortgage lender, affected individuals should review their loan statements and related financial accounts closely. Look for unfamiliar charges, unexpected account changes, or communications about loans you did not apply for. Catching these signs early can limit potential damage.
If you notice anything unusual, contact your financial institution right away. You should also document any suspicious activity in case you need to file a report later. Consulting a data breach attorney can help you understand your options if you experience financial harm connected to this incident.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
Official data breach notification from California Attorney General
Related Data Breaches
- Schwartz, Giannini, Lantsberger & Adamson (SGLA) Accountancy Corporation Data Breach Claim: Personal Information Reportedly Exposed
- Michael J. Berger and Co., CPA LLP Data Breach Exposes Social Security Numbers and Financial Account Information
- Toler Financial group Data Breach Exposes Social Security Numbers