PennyMac Data Breach Affects 3k Individuals: PHI Exposed

Private National Mortgage Acceptance Company LLC, which operates as part of PennyMac, disclosed a data breach involving its Group Health Plan that affected 3,972 individuals in the United States.

The company operates through several subsidiaries, including PennyMac Loan Services LLC, a leading national mortgage lender that has served over 4 million lifetime customers. The breach was disclosed to the U.S. Department of Health and Human Services on June 9, 2026.

The breach involved protected health information held by the Group Health Plan operated by Private National Mortgage Acceptance Company.

Because this breach was reported to the U.S. Department of Health and Human Services, it compromised protected health information. However, the specific categories of information that were exposed have not been detailed publicly.

PennyMac's response to the breach

Individuals who believe their health plan information may have been involved in this breach can contact PennyMac directly for more information about the incident and any assistance that may be available.