What happened in the Lennar Mortgage data breach?

Lennar Mortgage, LLC recently disclosed a data breach involving unauthorized access to a limited portion of its information systems. According to a regulatory report published by the Texas Attorney General, the Lennar Mortgage data breach affected approximately 348,416 individuals nationwide, including 60,526 Texas residents. The company provided notice through U.S. mail, online publication, and print media. Texas Data Security Breach Reports

Lennar Mortgage discovered a potential security issue on June 1, 2026, and immediately began securing its systems. The company retained an outside forensic team to determine the nature and extent of the activity. That investigation found that an unauthorized party used what Lennar Mortgage described as sophisticated social-engineering tactics to gain access to certain systems between May 26 and June 1, 2026. The company has not publicly explained the precise method used, such as whether the incident involved phishing, stolen credentials, impersonation, or another form of deception. It also has not identified the unauthorized party or characterized the incident as ransomware. Lennar Mortgage Notice of Privacy Event

As part of its response, Lennar Mortgage reviewed the information that may have been affected. That assessment concluded on August 4, 2026. Depending on the individual, the compromised data may have included names, contact information, dates of birth, Social Security numbers, driver’s license or state identification information, passport or other government identification information, and financial account information. A small number of individuals may also have had medical-related information involved. Lennar Mortgage emphasized that the specific information affected differed from person to person and that not every category applied to every individual.

Lennar Mortgage reported the event to law enforcement and applicable regulators and said it implemented additional technical safeguards following the incident. As of its public announcement, the company stated that it was not aware of any misuse of personal information connected to the breach. However, the absence of known misuse does not establish that information was never viewed or obtained; the public notice does not provide a more detailed account of what the unauthorized party did while accessing the affected systems.

Lennar Mortgage is offering affected individuals two years of complimentary identity-monitoring services through Kroll. Eligible individuals must activate those services by November 20, 2026. The company also recommends reviewing financial account statements and credit reports for unfamiliar activity. The principal dates in the Lennar Mortgage data breach are May 26, 2026, when the unauthorized access began; June 1, 2026, when the activity ended and Lennar Mortgage discovered the issue; August 4, 2026, when its information review concluded; and November 20, 2026, the deadline to enroll in the offered identity-monitoring services.

How did the Lennar Mortgage breach occur?

The Lennar Mortgage data breach occurred through a social-engineering attack. According to the company, an unauthorized party used “sophisticated social engineering tactics” to gain access to certain Lennar Mortgage information systems between May 26 and June 1, 2026. Lennar Mortgage discovered the activity on June 1 and secured its systems while working with an outside forensic firm to investigate. The company has not publicly disclosed the specific technique used—such as phishing, employee impersonation, or stolen login credentials—and has not identified the attacker or described the incident as ransomware.

When did the Lennar Mortgage breach occur?

The Lennar Mortgage data breach occurred between May 26 and June 1, 2026. Lennar Mortgage discovered the unauthorized activity on June 1, 2026, and its review of the potentially affected information concluded on August 4, 2026.

How many people were affected by the Lennar Mortgage breach?

The Lennar Mortgage data breach affected 348,416 people nationwide (per a Texas registry entry for “Lennar Mortgage, LLC,” report number BR-0005257), including 60,526 Texas residents, according to Lennar Mortgage’s regulatory filing with the Texas Attorney General. Texas Data Security Breach Reports

What information was exposed in the Lennar Mortgage breach?

• The specific information involved varied by person, and not every data category was exposed for every affected individual, but the data breach may have exposed individuals’:
  • names
  • contact information
  • Social Security numbers
  • dates of birth
  • financial account information
  • driver’s license or state identification information
  • passport or other government-issued identification information
  A small number of individuals may also have had medical-related information affected.

Has Lennar Mortgage offered free credit monitoring and/or identity theft protection services?

Yes. Lennar Mortgage is offering affected individuals two years of complimentary identity-monitoring services through Kroll. Eligible individuals must enroll using the instructions and activation code in their notice letter by November 20, 2026. Lennar Mortgage Notice of Privacy Event

Lennar Mortgage data breach timeline:

Date	Event
May 26, 2026	An unauthorized party began accessing certain Lennar Mortgage information systems through sophisticated social-engineering tactics.
June 1, 2026	The unauthorized access ended. Lennar Mortgage discovered the potential security issue, secured its systems, and began an investigation with an outside forensic firm.
On or after June 1, 2026	Lennar Mortgage contacted law enforcement and applicable regulators and implemented additional technical security measures.
August 4, 2026	Lennar Mortgage completed its assessment of the potentially affected data. The review found that personal and financial information belonging to certain individuals may have been compromised.
August 2026	Lennar Mortgage publicly announced the data breach and provided notice to affected individuals.
November 20, 2026	Deadline for eligible individuals to enroll in the two years of complimentary identity-monitoring services offered through Kroll.

Who is Lennar Mortgage?

Lennar Mortgage, LLC is a Miami-based residential mortgage lender and financial services subsidiary of Lennar Corporation, one of the nation’s largest homebuilders. The company provides home financing primarily to Lennar homebuyers and offers conventional, FHA-insured, VA-guaranteed, and other residential mortgage loan products through offices in many of the states where Lennar builds homes. Lennar Mortgage operates under Nationwide Multistate Licensing System identification number 1058 and maintains its principal office at 5505 Waterford District Drive in Miami, Florida. Lennar Mortgage Website and Lennar Corporation 2025 Form 10-K

What should you do if you received a Lennar Mortgage data breach letter?

If you received a Lennar Mortgage data breach letter, read it carefully to determine which information was affected and retain a copy for your records. Enroll in the two years of complimentary Kroll identity-monitoring services before the November 20, 2026 deadline, using the instructions in the letter. Review your bank and credit-card statements, obtain your free credit reports through AnnualCreditReport.com, and investigate any unfamiliar accounts, inquiries, or transactions. Because Social Security numbers and financial information may have been exposed, consider placing a free credit freeze with Equifax, Experian, and TransUnion; alternatively, you may place a one-year fraud alert by contacting any one of the three bureaus. Change passwords for affected or reused accounts, enable multifactor authentication where available, and remain alert for phishing communications that reference Lennar Mortgage or the breach. If you discover identity theft or fraud, contact the relevant financial institution immediately, document the activity, and report it through IdentityTheft.gov to receive a recovery plan. IdentityTheft.gov: What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach

Lennar Mortgage Data Breach Notice

The notice describes the Lennar Mortgage data breach, including the type of information that may have been involved and the steps offered to affected individuals.

Open the Lennar Mortgage Data Breach Notice in a New Tab

Sources and additional information about the data breach:

• • Lennar Mortgage Website
  • Lennar Mortgage Notice of Privacy Event
  • Lennar Corporation 2025 Form 10-K
  • Texas Data Security Breach Reports
  • AnnualCreditReport.com
  • FTC Consumer Advice: Identity Theft
  • IdentityTheft.gov
  • IRS Identity Theft Guide for Individuals
  • U.S. Department of Health and Human Services Office of Inspector General: Medical Identity Theft
  • IdentityTheft.gov: What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach

Class Action FAQ

About This Data Breach Resource

This page was created to give affected individuals and researchers a clear, comprehensive explanation of the Lennar Mortgage data breach. It summarizes what is currently known about the incident, including the timeline, how the breach was discovered, the types of information involved, the number of people affected when available, important notice dates, and steps individuals may want to take after receiving a data breach notification.

This resource is independently written and organized to help readers understand the breach without having to review multiple notices, state attorney general filings, company statements, and related materials. When available, this page relies on primary sources and identifies key facts, unanswered questions, and updates as new information becomes public.

This page is especially relevant for readers searching for information about the Lennar Mortgage data breach, Lennar Mortgage data breach notice, Lennar Mortgage class action investigation, what information was exposed, how many people were affected, and what affected individuals should do next.

Abington Cole + Ellery reviews data breach incidents involving sensitive personal information, financial information, and protected health information. This page is intended to help affected individuals understand the publicly reported facts, the types of information that may have been involved, and practical steps that may reduce the risk of identity theft or medical identity theft.

The information on this webpage is provided for general informational purposes only and does not constitute legal advice. Nothing on this page should be relied upon as legal advice for any particular situation. Submitting information through this page does not create an attorney-client relationship.

For more information about steps you can take to possibly reduce the risk harm arising from a data breach, please review the following article: What are some steps you can take if you've been the victim of a data breach?

This website is not associated with nor authorized by Lennar Mortgage or any affiliated companies. If you have received any other data breach notifications, you may want to review Abington Cole + Ellery's current list of data breach investigations.