Union Home Mortgage Corp. (UHM)

Union Home Mortgage Corp. (UHM), a nationwide mortgage lender with over 150 branches, experienced a cybersecurity incident where a cybercriminal hacker gained unauthorized access to systems containing personally identifiable information (PII). The compromised data includes names, addresses, dates of birth, Social Security numbers, government-issued ID numbers, and loan account numbers of hundreds of thousands of individuals. The breach has prompted a class-action investigation by Lynch Carpenter, LLP, a national law firm specializing in data privacy litigation. Affected individuals who received breach notifications may be eligible for compensation, indicating potential financial, reputational, and legal repercussions for UHM. The exposure of highly sensitive financial and identity-related data increases risks of identity theft, fraud, and long-term harm to impacted customers. The incident underscores a significant failure in cybersecurity defenses, leading to large-scale exposure of customer records without evidence (as of the report) of ransomware involvement. The breach’s scale and the nature of the stolen data suggest severe operational and trust-related consequences for the company.

Source: https://www.globenewswire.com/news-release/2025/09/26/3157256/0/en/Lynch-Carpenter-Investigates-Claims-in-Union-Home-Mortgage-Corp-Data-Breach.html

TPRM report: https://www.rankiteo.com/company/unionhomemortgage

"id": "uni5402854092725",
"linkid": "unionhomemortgage",
"type": "Cyber Attack",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Hundreds of thousands of '
                                              'individuals',
                        'industry': 'Financial Services',
                        'location': 'Ohio, USA (with 150+ branches nationwide)',
                        'name': 'Union Home Mortgage Corp. (UHM)',
                        'type': 'Mortgage Lender'}],
 'customer_advisories': 'Data breach notifications sent to affected '
                        'individuals; Lynch Carpenter, LLP encourages affected '
                        'individuals to submit claims for review via their '
                        'website or contact Jerry Wells at (412) 322-9243 or '
                        'jerry@lcllp.com',
 'data_breach': {'data_exfiltration': 'Likely (records were accessed by '
                                      'cybercriminal)',
                 'number_of_records_exposed': 'Hundreds of thousands',
                 'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Dates of birth',
                                                         'Social Security '
                                                         'numbers',
                                                         'Government-issued ID '
                                                         'numbers'],
                 'sensitivity_of_data': 'High (includes SSNs, government IDs, '
                                        'and financial data)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Data (loan account '
                                              'numbers)']},
 'date_publicly_disclosed': '2025-09-26',
 'description': 'Union Home Mortgage Corp. (UHM), an Ohio-based mortgage '
                'lender with over 150 branches nationwide, announced a '
                'cybersecurity incident where a cybercriminal hacker may have '
                'accessed records containing personally identifiable '
                'information (PII), including names, addresses, dates of '
                'birth, Social Security numbers, government-issued ID numbers, '
                'and loan account numbers. The breach impacted hundreds of '
                'thousands of individuals.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
                                       'exposure of sensitive PII',
            'data_compromised': ['Names',
                                 'Addresses',
                                 'Dates of birth',
                                 'Social Security numbers',
                                 'Government-issued ID numbers',
                                 'Loan account numbers'],
            'identity_theft_risk': 'High (due to exposure of SSNs and other '
                                   'PII)',
            'legal_liabilities': 'Lynch Carpenter, LLP is investigating claims '
                                 'for potential compensation; class action '
                                 'litigation possible'},
 'investigation_status': 'Under investigation by Lynch Carpenter, LLP for '
                         'potential legal claims',
 'references': [{'date_accessed': '2025-09-26',
                 'source': 'GLOBE NEWSWIRE Press Release'},
                {'source': 'Union Home Mortgage Corp. About Page',
                 'url': 'https://www.uhm.com/about-us/'},
                {'source': 'Lynch Carpenter LLP',
                 'url': 'https://www.lynchcarpenter.com'}],
 'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit '
                                            '(under investigation by Lynch '
                                            'Carpenter, LLP)'},
 'response': {'communication_strategy': 'Public announcement via GLOBE '
                                        'NEWSWIRE; data breach notifications '
                                        'sent to affected individuals'},
 'threat_actor': 'Cybercriminal hacker',
 'title': 'Union Home Mortgage Corp. Data Breach',
 'type': 'Data Breach'}