Impac Mortgage Holdings Data Breach Exposes Sensitive Customer Information
Impac Mortgage Holdings, Inc., a California-based financial services company specializing in residential mortgage lending, is under investigation following a data breach that exposed sensitive personal information. The breach, detected on March 20, 2024, involved unauthorized access to company systems between February 21 and March 20, 2024.
Impac Mortgage, founded in 1995 and formerly listed on the NYSE American under the ticker IMH, operates through subsidiaries like Impac Mortgage Corp., offering mortgage products such as Non-QM, Jumbo, and government-backed loans. The company has funded over $90 billion in loans since its inception but was delisted in 2024 due to financial compliance issues, now trading over-the-counter as IMPM.
An investigation revealed that an unknown actor accessed files containing names and Social Security numbers of affected individuals. Impac Mortgage notified impacted parties via written notice on March 27, 2024. Legal firm Shamis & Gentile P.A. is now reviewing potential compensation claims for those affected by the breach.
Source: https://www.claimdepot.com/investigations/impac-mortgage-data-breach-2026
Impac Mortgage Corp. cybersecurity rating report: https://www.rankiteo.com/company/impacmortgage
"id": "IMP1776537721",
"linkid": "impacmortgage",
"type": "Breach",
"date": "2/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Residential Mortgage Lending',
'location': 'California, USA',
'name': 'Impac Mortgage Holdings, Inc.',
'type': 'Financial Services Company'}],
'customer_advisories': 'Written notice sent to impacted parties on March 27, '
'2024',
'data_breach': {'personally_identifiable_information': 'Names, Social '
'Security numbers',
'sensitivity_of_data': 'High (Social Security numbers)',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII)'},
'date_detected': '2024-03-20',
'date_publicly_disclosed': '2024-03-27',
'description': 'Impac Mortgage Holdings, Inc., a California-based financial '
'services company specializing in residential mortgage '
'lending, is under investigation following a data breach that '
'exposed sensitive personal information. The breach involved '
'unauthorized access to company systems between February 21 '
'and March 20, 2024, with files containing names and Social '
'Security numbers accessed by an unknown actor.',
'impact': {'data_compromised': 'Names and Social Security numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential compensation claims under review'},
'investigation_status': 'Under investigation',
'references': [{'source': 'Incident Notification'}],
'regulatory_compliance': {'legal_actions': 'Potential compensation claims '
'under review'},
'response': {'communication_strategy': 'Written notice to impacted parties',
'third_party_assistance': 'Shamis & Gentile P.A. (legal firm)'},
'threat_actor': 'Unknown',
'title': 'Impac Mortgage Holdings Data Breach Exposes Sensitive Customer '
'Information',
'type': 'Data Breach'}