Lennar Mortgage, LLC confirmed a data breach that may have exposed customers’ Social Security numbers, financial account information, and mortgage application details. The exact number of affected individuals has not been publicly disclosed. Anyone who applied for or holds a mortgage with the company should monitor their credit reports and consider placing a fraud alert or credit freeze immediately.
| Company | Lennar Mortgage, LLC |
|---|---|
| Industry | Finance |
| Data Types Exposed | Full Names, Social Security Numbers, Financial Account Information, Mortgage and Loan Application Details, Contact Information |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | California Attorney General, Washington State Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Lennar Mortgage Data Breach?
Lennar Mortgage, LLC recently notified state regulators about a data breach involving sensitive customer information. The company filed formal notifications with both the Washington State Attorney General and the California Attorney General. These filings confirm that unauthorized parties accessed personal data tied to the mortgage lender’s customers.
As of now, the exact date the breach was discovered has not been publicly disclosed. Similarly, the method used to gain access to Lennar Mortgage’s systems has not been detailed in public filings. However, the fact that formal breach notifications were required signals that regulators and the company both determined real exposure of personal data occurred.
Following discovery of the incident, Lennar Mortgage appears to have launched a review of its systems and data. Because mortgage companies routinely store highly sensitive financial and identity documents, any unauthorized access carries serious consequences. As a result, the notification to two separate state attorneys general reflects the scope of concern involved.
Details about the investigation process itself, including whether outside cybersecurity firms were engaged, have not been made public. This lack of detail is common in early-stage breach disclosures. Nonetheless, the confirmed regulatory filings establish that this Lennar Mortgage data breach is a real, documented event affecting identifiable individuals.
Who was affected?
The individuals affected by this breach likely include current and former customers of Lennar Mortgage, LLC. Because the company operates in the mortgage lending industry, affected individuals may include homebuyers, borrowers, and applicants who submitted personal financial information during the loan process.
The exact number of people impacted has not been publicly disclosed. Therefore, anyone who has applied for or holds a mortgage through Lennar Mortgage should consider themselves potentially affected until more specific information becomes available.
Given that mortgage applications often involve spouses, co-borrowers, and family members, the pool of affected individuals could extend beyond primary account holders. In addition, because the company filed notifications in both Washington and California, the geographic reach of this breach likely spans multiple states.
What Information Was Potentially Exposed?
Mortgage lenders like Lennar Mortgage typically collect and store some of the most sensitive categories of personal data. While the complete list of exposed data elements has not been fully itemized in public sources, breach notifications of this type commonly involve the following categories.
- Full names
- Social Security numbers
- Financial account information
- Mortgage and loan application details
- Contact information such as addresses and phone numbers
Because this incident involves a mortgage lender, the exposure of Social Security numbers and financial account details poses a heightened identity theft risk. Criminals can use this type of information to open new credit lines, file fraudulent tax returns, or apply for loans in a victim’s name.
In addition, exposed mortgage application details may include income information, employment history, and property records. As a result, affected individuals could face targeted phishing attempts that reference real details from their loan files, making scams appear more convincing and harder to detect.
What is the company doing?
In response to the breach, Lennar Mortgage, LLC filed official notifications with state regulators, a required step whenever a company confirms unauthorized access to residents’ personal information. Specifically, the company filed with the California Attorney General and the Washington State Attorney General.
These filings indicate that Lennar Mortgage has taken steps to formally document and disclose the breach as required under state law. Consequently, affected individuals in these states should expect to receive, or may have already received, direct notification letters describing the specific data involved.
Beyond the regulatory filings, further details about remediation steps, such as password resets or system security upgrades, have not been publicly released. Likewise, whether Lennar Mortgage is offering credit monitoring or identity protection services has not been specified in available records. Affected individuals should watch for official letters that may outline any such offerings.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Anyone who has done business with Lennar Mortgage should start checking their credit reports regularly. Because Social Security numbers and financial data may have been exposed, new account fraud is a realistic concern.
You can request free credit reports from all three major bureaus. Doing so allows you to catch unfamiliar accounts, inquiries, or loans opened in your name before the damage grows.
Consider a Fraud Alert or Credit Freeze
Given the possible exposure of Social Security numbers, placing a fraud alert or credit freeze is a strong protective step. A fraud alert requires lenders to verify your identity before opening new credit, while a credit freeze blocks new accounts entirely until you lift it.
Both options are free and can be requested directly through Equifax, Experian, and TransUnion. Because mortgage-related data often includes financial account numbers, a freeze provides an extra layer of protection against long-term identity theft.
Stay Alert for Phishing and Scam Attempts
Criminals often use stolen personal data to craft convincing phishing emails or phone calls. Therefore, be cautious of any message claiming to be from Lennar Mortgage, your bank, or a government agency asking for personal details.
Never click links or share information in unsolicited messages. Instead, contact the company directly using verified phone numbers or official websites to confirm any request is legitimate.
Review Financial and Loan Statements Closely
Because mortgage and loan application details may have been exposed, it is wise to review your mortgage statements, bank accounts, and credit card activity closely. Look for unfamiliar charges, address changes, or new inquiries tied to your name.
If you spot anything suspicious, report it immediately to your financial institution. In addition, consider notifying the credit bureaus so they can flag your file for extra scrutiny.
Consult a Data Breach Attorney
If you believe your information was compromised in this breach, speaking with a data breach attorney can help clarify your rights. Many attorneys offer free case evaluations to determine whether you may be eligible for compensation.
Because laws vary by state, an attorney familiar with data breach litigation can explain deadlines and potential legal options. This step costs nothing upfront and can provide peace of mind while you monitor for identity theft.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
Official data breach notification from California Attorney General
Official data breach notification report (PDF) from Washington State Attorney General