Real Estate
Home›Real Estate›Industry›Mortgage breach delays can span months before affected…
Mortgage breach delays can span months before affected people are told
HousingWire notes one Long Island lender detected unauthorized network activity in May 2025 but did not notify affected employees until March 2026, a delay alleged to exceed 260 days past the statutory deadline.
HousingWire says mortgage data breaches often involve “decades of records,” so the damage does not end when files are stolen. Instead, the article argues that the most damaging period can start as soon as an intrusion is detected, even if companies keep quiet publicly.
The outlet points to what it describes as a repeated pattern across nonbank lenders, with at least five disclosing prior hacks since January. It cites a Long Island lender that detected unauthorized network activity in May 2025 and did not notify affected employees until March 2026, which a subsequent lawsuit, according to the article, puts at more than 260 days past the statutory deadline.
HousingWire also frames mortgage breaches as long-tail events because lenders retain loan records for decades. The article says exposed files can remain usable for fraud years later, and once data reaches leak sites, legal and regulatory processes can begin quickly, including investigations and settlements.
The piece adds that companies often defend notification delays by citing ongoing investigations, and it argues that forensic work and notification timing can follow different timelines. It notes that one recent nonbank breach resulted in a settlement valued at more than $86 million, underscoring the lengthy consequences it says can follow even after the intrusion is discovered.