Cornerstone First Mortgage Data Breach Exposes SSNs

On March 5, 2026, Cornerstone First Mortgage, a full-service mortgage lender and broker based in San Diego, disclosed a data breach affecting at least 73 Massachusetts residents. The breach impacted customers who provided personal information to Cornerstone First Mortgage LLC or its predecessor, Cornerstone First Mortgage Inc.

The incident, which was reported to the Massachusetts Office of Consumer Affairs and Business Regulation, involved the exposure of sensitive personal information, specifically Social Security numbers. The breach occurred in July or August 2023 and was discovered in September 2025, according to the official disclosure.

The company has not specified the exact method by which the breach occurred or identified who was responsible for the unauthorized access.

The delayed discovery raises concerns about the potential window of exposure and the importance of monitoring for suspicious activity.

Cornerstone First Mortgage's response

Cornerstone First Mortgage is offering affected individuals complimentary credit monitoring and identity protection services through Kroll for 24 months. This service includes single bureau credit monitoring, fraud consultation, and identity theft restoration.

Enrollment details and activation codes have been provided directly to affected customers, and enrollment must be completed by May 11, 2026.

The company is advising all impacted individuals to remain vigilant by regularly reviewing financial accounts, credit card statements, and credit reports for any unusual or unauthorized activity. Affected individuals are also encouraged to consider placing a fraud alert or security freeze on their credit files, both of which can be done free of charge through the major credit bureaus.

The notice to consumers, which will be available as a PDF at the bottom of this page, provides detailed instructions and contact information for these additional steps.