Union Home Mortgage data breach: what happened and what to do
Union Home Mortgage found unauthorized access to its systems, with access starting as early as May 27, 2025. The data included names, loan numbers, Social Security numbers, driver's license or ID numbers and dates of birth. The company offers 12 months of credit monitoring.
View all 13,115 breaches- Breach date
- 27 May 2025
- Data exposed
- Names, Social security numbers, Driver's licenses, Dates of birth
- Last updated
What happened
Union Home Mortgage Corp. detected an incident on June 25, 2025. Its investigation, which finished on August 26, 2025, found that personal information may have been accessed without authorization, with the earliest access on May 27, 2025. The California Attorney General lists the breach, and notice letters are dated September 11, 2025.
Per the company's filings, what was involved varied by person. It could include a name, loan number, Social Security number, driver's license or government-issued ID number, or date of birth. The company says it has no evidence of misuse.
A mortgage file is a good target. A Social Security number, date of birth and ID number together are what's needed to open accounts or take over existing ones in your name, and a loan number makes a fake 'servicer' call convincing.
Union Home Mortgage offers 12 months of free credit monitoring and identity protection. A class action is pending in the Northern District of Ohio; the company denies wrongdoing and no settlement has been reached.
The company says it began mailing notices in September 2025 and has found no evidence of misuse or attempted misuse of the information. It also reported counts to individual states: 1,650 Washington residents and 24,160 Texans, which are state-level figures rather than a national total.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze is free and stops anyone opening new credit in your name. Set it up at Equifax, Experian and TransUnion, and lift it only when you apply for credit yourself.
- 2
Use the free credit monitoring if you were offered it
Union Home Mortgage offers 12 months of free credit monitoring and identity protection. Sign up with the code in your letter before it expires, and read your statements for charges you don't recognize.
- 3
Verify any call or email about your loan
Scammers use loan numbers to pose as your servicer. Hang up and call the number on your statement before sharing anything or changing payment instructions.
- 4
Expect phishing that mentions the breach
Criminals use real details to sound credible. Don't click links in unexpected emails, texts or calls. Contact the company using the number on its official website.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus keeps monitoring breach databases and the dark web and alerts you when something new turns up.
Frequently asked
Was I affected by the Union Home Mortgage data breach?
The company mailed letters dated September 11, 2025. If you had a loan application or loan with Union Home Mortgage, check for one.
What was exposed?
A name, loan number, Social Security number, driver's license or government-issued ID number or date of birth, depending on the person.
Is there a settlement?
A class action is pending, but no settlement has been reached. The company denies wrongdoing.
Sources
- oag.ca.gov/privacy/databreach/list
- mass.gov/doc/2025-1318-union-home-mortgage-corp/download
- consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/Consumer%20Notice%20(SC)%20UHM.pdf
- mpamag.com/us/mortgage-industry/industry-trends/union-home-mortgage-faces-class-action-after-clients-data-exposed/552045
Something wrong or out of date? Tell us and we'll re-check it.