Plaza Home Mortgage Data Breach Exposes Social Security Numbers

San Diego based, Plaza Home Mortgage Inc., disclosed a data breach involving unauthorized access to its information systems. The breach occurred on or around Feb. 17, 2026, according to the company's notification to affected individuals.

Plaza Home Mortgage discovered the breach on March 3, 2026, and began notifying consumers with letters dated May 19, 2026. The company also posted a notice about the incident through Financial Shield, its identity protection partner.

On or around Feb. 17, 2026, threat actors gained unauthorized access to one employee's computer at Plaza Home Mortgage. Through that access point, the unauthorized party illegally entered the company's broader information systems.

The company stated that its security controls detected the unauthorized access and that it took immediate action to shut down the attack. Plaza Home Mortgage formally identified the breach on March 3, 2026, and launched an investigation to determine what information may have been compromised.

The investigation found that the unauthorized party may have obtained personal information belonging to both consumers and employees. For consumers, the types of information that may have been exposed included names, addresses, Social Security numbers, dates of birth, driver's license numbers or other government identification and information related to mortgage loan applications and servicing.

For employees of Plaza Home Mortgage, the personal information that may have been accessed included first names, last names, Social Security numbers, dates of birth and usernames and passwords for employee accounts.

Plaza Home Mortgage's response

Because the breach involved highly sensitive information such as Social Security numbers, dates of birth and mortgage-related financial records, Plaza Home Mortgage is offering affected individuals 12 months of free credit monitoring and identity theft protection services through CyEx, operating under the Financial Shield Complete program. The package includes one-bureau credit monitoring, financial transaction monitoring, high-risk transaction monitoring, bank and financial account monitoring, home title monitoring, real-time authentication alerts, fictitious identity monitoring, address change monitoring, a monthly credit score tracker and $1 million in identity theft insurance.

To enroll, affected individuals should visit the Financial Shield enrollment page and enter the unique activation code included in their notification letter. Each letter contains a specific enrollment deadline, after which the activation code will no longer work. Individuals should enroll as soon as possible to take full advantage of the protection services.

In its notification letter, the company stated: "We sincerely apologize for the inconvenience this incident has caused you."

Individuals with questions can call Plaza's dedicated support line at 844-953-3450, available Monday through Friday from 8 a.m. to 11 p.m. and Saturday from 9 a.m. to 6 p.m., excluding holidays. For assistance specifically with Financial Shield enrollment, individuals can call 1-888-713-0806.