US Mortgage Corporation Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the US Mortgage Corporation data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About US Mortgage Corporation
US Mortgage Corporation is a direct mortgage lender headquartered in Melville, New York. The company was founded in 1994 by Steven A. Milner and operates as an independent mortgage banker.
US Mortgage Corporation specializes in home purchase loans, refinances, reverse mortgages and FHA products, serving tens of thousands of homeowners nationwide.
What Happened?
On May 14, 2025, US Mortgage Corporation detected suspicious activity within a limited portion of its computer network.
The company engaged third-party cybersecurity experts to investigate and remediate the incident. The investigation revealed that an unauthorized third party accessed the network from May 13 to May 14, 2025.
The hacking group SAFEPAY claimed responsibility and posted about the breach on the dark web on May 29, 2025.
The company worked with a data-review firm to analyze the impacted files and received results in October 2025.
Written notices to affected individuals began mailing on March 5, 2026. The breach was disclosed to the attorneys general of New Hampshire and Vermont, and to the Massachusetts Office of Consumer Affairs and Business Regulation starting on March 6, 2026.
Information Exposed:
- Names
- Contact information
- Government identification numbers (such as Social Security numbers or driver’s license numbers)
- Financial account information (including credit/ debit card numbers)
- Limited medical or insurance information
The company has reported that 65 Massachusetts residents and at least four New Hampshire residents were affected.
You May Be Entitled to Compensation
If your information was compromised in the US Mortgage Corporation data breach, you may be eligible to join a lawsuit seeking compensation for damages such as time spent addressing the breach, out-of-pocket expenses, or the risk of identity theft. Lawyers are actively investigating this matter and can help you determine your eligibility.
To get started, complete the below form to find out if you qualify to participate in a class action lawsuit related to this data breach.
.png)