Mungo Homes Data Breach Exposed SSNs and Medical Information

Clayton Properties Group Inc, doing business as Mungo Homes, a homebuilder that constructs new homes in South Carolina, North Carolina, Georgia and Virginia, has disclosed a data breach that occurred in May 2026.

Mungo Homes was founded in 1954 in Columbia, South Carolina, and is headquartered in Irmo, South Carolina. The company became part of Clayton Properties Group, a Berkshire Hathaway company, in 2018.

On or around May 6, 2026, an unauthorized third party used social engineering techniques to register a new multifactor authentication device and obtain login credentials belonging to a Mungo Homes employee.

The threat actor used the compromised login credentials to gain entry to the employee's Microsoft OneDrive, SharePoint and email accounts. The files stored in these types of accounts may contain a wide range of business and personal records.

After discovering the unauthorized activity, Mungo Homes launched a forensic investigation. The investigation determined that between approximately May 6 and May 11, 2026, the threat actor downloaded files from the compromised accounts.

On July 1, 2026, the forensic investigation confirmed that this personal information had been potentially compromised as a result of the breach. The investigation found no evidence of any further lateral movement or compromise of any other employee accounts beyond those initially identified.

The types of personal information exposed included names, Social Security or individual tax identification numbers, financial account numbers, dates of birth, driver's license information, addresses and medical, prescription or insurance information.

The breach was first reported to the Massachusetts Office of Consumer Affairs and Business Regulation.

Mungo Homes' response to the breach

Mungo Homes is offering a complimentary 12-month membership to a credit and identity-theft monitoring service. The specific monitoring provider, enrollment website, activation code and enrollment deadline are being provided directly to each affected individual in their personal notification letter.

Individuals who have questions about the breach can contact the company using the dedicated call center phone number included in their notification letter. A company representative will be available to help with any concerns.