Plaza Home Mortgage Confirms Data Breach Following Ransomware Attack Plaza Home Mortgage, a national mortgage lender based in Costa Mesa, California, has notified customers and employees of a data breach stemming from a ransomware attack earlier this year. The company, which operates nationwide and specializes in wholesale and correspondent lending, disclosed the incident on May 29, 2026, through third-party notice administrator Simpluris, Inc. The breach appears linked to a February 27, 2026, attack claimed by the ransomware group SilentRansomGroup, which threatened to release sensitive data if ransom demands were not met. Initial reports suggested the compromise included employee records, user data, and third-party credentials, though the full scope remains unclear. While the February incident cited exposure for at least 54 users and 10 employees, the true number of affected individuals has not been publicly disclosed. Plaza Home Mortgage, founded in 2000 with over 900 employees and nearly $280 million in annual revenue, handles highly sensitive financial data, including Social Security numbers, bank account details, and loan information. The breach places the company under regulatory scrutiny, particularly under the Gramm-Leach-Bliley Act (GLBA), which requires financial institutions to report breaches affecting 500 or more consumers to the FTC within 30 days. State-level laws, including California’s strict notification requirements, may also apply. The three-month gap between the attack and official notification reflects the complexity of breach investigations, during which companies must assess the extent of exposure and identify affected parties. Simpluris, a firm specializing in breach response, is managing victim communications and remediation efforts. The incident may also trigger legal challenges, including potential class-action lawsuits, depending on whether the company’s security measures are deemed adequate. Affected individuals have been directed to a dedicated portal for details on protective measures, though specific data exposed and remediation services offered remain undisclosed. The breach underscores the ongoing risks of ransomware attacks targeting financial institutions and the prolonged impact on victims.

Plaza Home Mortgage Faces Class Action Lawsuits Over Data Breach Affecting 138,000 Plaza Home Mortgage, a San Diego-based wholesale and correspondent lender, is facing at least two class action lawsuits following a mid-February cybersecurity incident that exposed the personal identifiable information (PII) of 137,976 consumers and employees. The breach was discovered on March 3, though plaintiffs allege it may have occurred as early as September 12, 2023, based on the company’s internal analysis. The company first notified affected parties on May 29, nearly three months after detecting the intrusion, which involved unauthorized access to an employee’s computer. Plaza has denied claims by the cyber threat group SilentRansomGroup (also known as Luna Moth or UNC3753) that the incident was a ransomware attack. In separate filings in the Southern District of California, plaintiffs Kevin Grubb (representing consumers and mortgage applicants) and April Powell (representing current and former employees) criticized Plaza’s delayed disclosure and alleged inadequate cybersecurity measures. Powell’s legal team accused the company of recklessly handling PII, leaving it vulnerable to exploitation. Over 40,000 employees were reportedly affected. Plaza has offered credit monitoring and identity-theft protection through CyEx’s Financial Shield Complete program to impacted individuals. However, plaintiffs are seeking class certification, unspecified monetary damages exceeding $5 million per case, and court-ordered third-party audits to ensure future compliance with security standards. The company has declined to comment on the ongoing litigation.