Union Home Mortgage Data Breach Exposes SSNs and Personal Info

Published

July 31, 2025

Updated

September 12, 2025

Union Home Mortgage

Types of INFORMATION affected

Names
Social Security Numbers
Dates of Birth
Addresses
Government IDs
Medical Info
Financial Info

Union Home Mortgage experienced a major data breach compromising sensitive personal information. Exposed information may include names, Social Security numbers, home addresses, dates of birth, driver’s license or state ID numbers and passport numbers.

The cybersecurity incident was disclosed to the Massachusetts Attorney General's office on July 25, 2025. Union Home Mortgage began notifying impacted individuals on the same day. The data breach was reported to the Texas Attorney General's office several weeks later on Sept. 12, 2025.

The breach impacted several thousand individuals, including 24,160 in Texas alone. The nature of the data breach, with Social Security numbers compromised, raises the risk of identity theft and fraud for those impacted.

Union Home Mortgage's response

In addition to required state and federal disclosures, Union Home Mortgage is offering 24 months of free credit monitoring services to impacted individuals.

If you receive a notice from Union Home Mortgage about this breach, you may want to:

Enroll in the complimentary 24-months credit monitoring services, offered by UHM.
Monitor your credit reports and financial accounts for any unusual activity.
Be alert for phishing emails or phone calls that may use your exposed information.
Consider placing a fraud alert or credit freeze with major credit bureaus.

More information about the company can be found on the Union Home Mortgage Corp. website.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.

Notice Letter

Disclosures

Affected Entity

Union Home Mortgage

Consumers Notification date

Date of Breach

Breach Discovered Date

Total People Affected

Information Types Exposed

Name of individual
Address
Social Security Number Information
Driver’s License number
Government-issued ID number (e.g. passport, nan, social security numbers, state ID card)
Date of Birth