Plaza Home Mortgage Data Breach

The California Attorney General lists February 17 and publishes separate notice samples for customers and employees. Texas's 12,610 residents are a state subset within the nationwide total of 137,976, so the two figures must not be added together.

Public statements say the access involved an employee computer. They do not disclose the initial access method, technical root cause, or identity of the threat actors, so phishing, malware, or another method should not be assumed.

Depending on the person, affected information may include names, addresses, dates of birth, Social Security numbers, driver's licenses or other government identification, and mortgage application or servicing information. Employee records may also include account usernames and passwords.

This does not mean every listed field was present for every affected person. The unspecified “other” category in the Texas record is not expanded into a separate data class; only information expressly named by the sources is included.

A combination of Social Security numbers, birth dates, addresses, and government identification can support fraudulent credit applications, tax fraud, or account-recovery attempts. Notice recipients should review their credit reports and consider a credit freeze or fraud alert when appropriate.

People whose individual notice confirms driver's-license information can review replacement or monitoring options with their state licensing agency. Employees should promptly change the affected account password and replace reused or similar passwords elsewhere.

Mortgage application and servicing context can make fake payment-change, escrow, refinancing, document-upload, or identity-verification messages more convincing. An attacker may use a real name and address to create urgency.

If an unexpected message changes payment instructions, bank details, a closing date, or contact information, verify it through a previously known official number before acting. Do not rely on the link or phone number supplied in the unexpected message.

Consider the free credit and identity-monitoring services described in the company notice, and regularly review credit reports, new-account applications, and tax records. A unique email password and multifactor authentication reduce the impact of follow-on phishing.

Employees should revoke active sessions, review recovery methods, and replace any reused passwords. Customers should check their mortgage-servicing account for unauthorized changes to contact or payment information.

A positive match connected to this incident is sufficient reason to apply the notice's protective steps without delay. It does not, by itself, prove that every listed data type was present for that person.

A negative result does not guarantee that a person was absent from other company systems or unrelated breaches. Anyone who received a direct Plaza Home Mortgage notice should follow the company's and regulators' guidance regardless of a search result.