Subscribe To Our Newsletter

This field is for validation purposes and should be left unchanged.

HMA Mortgage Data Breach

HMA Mortgage reported a data breach affecting 12,643 individuals, including 48 residents of Maine, exposing sensitive personal and financial information. Affected individuals should monitor their accounts and consider exploring legal action for compensation.

HMA Mortgage
Date of Breach: May 16, 2025
CAU logo

Who was affected:

Clients of HMA Mortgage

Impacted Data:

Full names

Social Security numbers

Passport numbers

Taxpayer ID numbers

Digital signatures

Biometric data

Dates of birth

Banking and financial information

Health insurance and medical information

Affordable Mortgage Advisors, operating as HMA Mortgage, recently disclosed a data breach affecting sensitive personal and financial information. The breach, which occurred between April 25, 2025, and May 15, 2025, compromised the personal data of many individuals and was discovered in mid-May 2025.

HMA Mortgage Data Breach Investigation

Affordable Mortgage Advisors (AMA), known for its services as HMA Mortgage, discovered that unauthorized access had been gained to its network on May 16, 2025. The company immediately launched a comprehensive investigation in collaboration with external cybersecurity experts to assess the scope of the breach and to determine the extent of compromised data.

The investigation revealed that the breach occurred over a period from April 25 to May 15, 2025, during which an unauthorized party potentially accessed certain files containing sensitive personal information. On November 25, 2025, it was confirmed that these files included personal data such as:

  • Full names

  • Social Security numbers

  • Passport numbers

  • Taxpayer ID numbers

  • Digital signatures

  • Biometric data

  • Dates of birth

  • Banking and financial information

  • Health insurance and medical information

Not all individuals’ data was impacted, and there is no evidence indicating that the exposed information has been misused. However, the breach involved highly sensitive data that could pose significant risks if exploited.

When Did This Breach Occur?

According to HMA Mortgage’s disclosure:

  • Date(s) the Breach Occurred: April 25, 2025 – May 15, 2025

  • Date the Breach Was Discovered: May 16, 2025

The breach was discovered on May 16, 2025, after suspicious activity was detected in the company’s systems.

What Information Was Breached?

The compromised data may have included the following:

  • Personal Identifiers: Name, date of birth, Social Security number, passport number, taxpayer ID number

  • Financial Information: Banking details, financial account numbers

  • Medical and Health Information: Health insurance data, medical records

  • Other Sensitive Data: Digital signatures, biometric data

Although the breach affected sensitive personal information, there is no confirmed evidence that this information has been misused. The company has emphasized its commitment to securing its systems and protecting the affected individuals.

What You Can Do

If you were impacted by this breach, here are the recommended steps to protect your personal information:

  • Place a fraud alert or security freeze on your credit files with the three major credit bureaus (Equifax, Experian, and TransUnion) to prevent unauthorized access to your credit report.

  • Enroll in credit monitoring services to track any changes to your credit file.

  • Review your financial accounts and credit reports regularly for any suspicious activity or errors.

  • Report any unfamiliar charges or activity to your financial institutions and take action to secure your accounts.

  • Stay vigilant for potential identity theft, especially regarding health insurance or medical information.

Even if you have not experienced any issues with your information, taking precautionary measures can help mitigate any potential risks associated with the breach.

File a Data Breach Lawsuit Against HMA Mortgage

If you were notified by HMA Mortgage about this breach, you may have the right to pursue legal action. Data breach lawsuits help hold organizations accountable when they fail to secure sensitive personal information.

Compensation in these cases can include reimbursement for out-of-pocket expenses, credit monitoring costs, identity theft protection services, and other damages caused by the breach.

You don’t have to handle this situation alone. If you believe your information was compromised, it’s important to understand your legal rights and the potential for compensation.

Contact us at Class Action U, where we can connect you with a lawyer experienced in class action lawsuits. If you’ve been impacted by the breach, received notice, or believe your information was compromised, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner, and no obligation after speaking with someone from our team.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: May 16, 2025
Date of Breach: September 11, 2025
Date of Breach: March 30, 2025

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.