Lennar Mortgage data breach: 348,416 people after a social engineering attack in May 2026

How many people were affected by the Lennar Mortgage data breach?

348,416 in total, according to the number Lennar Mortgage reported to Indiana. The letter gives no count. The state lists count their own residents:

Regulator	Who it counts	Number	Recorded
Indiana attorney general	Total reported by Lennar Mortgage	348,416	Notice August 14, 2026
Texas attorney general	Texans	60,526	Posted August 14, 2026
Washington attorney general	Washingtonians	11,417	Reported August 14, 2026
Indiana attorney general	Indiana residents	6,647	Notice August 14, 2026
Massachusetts consumer affairs office	Massachusetts residents	674	Reported August 14, 2026

Texas's attorney general lists 60,526 Texans for Lennar Mortgage, posted on August 14, 2026.

Massachusetts marks every category it tracks as breached for its residents: Social Security numbers, medical records, financial accounts, driver's licenses and credit or debit card numbers. Lennar Mortgage's 348,416 is the 26th largest total among the 2026 notices on Indiana's list, just after Cornerstone Staffing Solutions (357,444); the ranking of 2026's largest breaches lists the 25 above it.

What happened at Lennar Mortgage?

Lennar Mortgage says it learned of a possible problem with a limited part of its systems on June 1, 2026, secured them and brought in an outside forensics team. The investigation found that the intruder got in through social engineering, meaning a person was deceived into opening the way in. The letter does not say who was deceived or how.

Date	Event
May 26, 2026	Unauthorized access begins
June 1, 2026	Lennar Mortgage becomes aware; access ends
August 4, 2026	Review of the affected data concludes
August 14, 2026	Letters; notices to Washington, Indiana and Massachusetts

The review of whose information was affected finished on August 4, 2026. Lennar Mortgage contacted law enforcement and notified regulators.

What information was involved?

Each letter lists its own data elements; the filed copy leaves that list as a blank to fill in. The state records give the fullest view. Washington lists eight categories, from names and Social Security numbers to passport, military ID and medical information, and Massachusetts marks all five of its categories as breached. The letter says Lennar Mortgage knows of no misuse.

What is Lennar Mortgage offering?

Item	Detail from the letter
Service	Kroll identity monitoring for two years: single-bureau credit monitoring, fraud consultation and identity theft restoration
Cost	None
Enrollment	Online at Kroll's enrollment site, with the membership number printed on the letter, by the deadline printed on the letter
Help line	(844) 958-8939, Monday to Friday, 9:00 a.m. to 6:30 p.m. Eastern Time, except major U.S. holidays

The guide to credit monitoring offers compares offers like this one across notices.

Is this the same as the Lennar Corporation notice?

No. Indiana's list also carries a separate notice from Lennar Corporation, sent August 11, 2026, for a breach dated March 24, 2026, with 6,643 people in total. The breach date and the count differ from Lennar Mortgage's, and this page covers only the Lennar Mortgage incident.

Lennar Corporation, the listed homebuilder, reports mortgage financing for buyers of its homes within its Financial Services segment. Its quarterly reports for the quarters ended May 31 and August 31, 2026 do not mention cybersecurity at all.

Why did I get a letter from Lennar Mortgage?

The letter says only that your information may have been in the affected systems. It does not say whether recipients are borrowers, loan applicants or others. If your letter lists a Social Security number or financial account information, the steps in it apply: enroll in the Kroll service, watch account statements and consider a credit freeze.

What the documents leave open

• Who was deceived in the social engineering attack, and how.
• Which systems were reached, and whether data was copied or only viewed.
• Whether borrowers, applicants or employees make up the 348,416.