Gold Star Mortgage Data Breach Lawsuit: Ransomware Claim, One Federal Case
Active Litigation
Gold Star Mortgage Financial Group, an Ann Arbor, Michigan mortgage lender and servicer, was named on a ransomware leak site in late September 2026. One day after the alleged breach, a former borrower filed a proposed class action in federal court in Michigan. As of October 18, 2026, the company has not publicly confirmed the incident, no official count of affected people exists, and there is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened and What the Lawsuit Says
On September 23, 2026, the dark-web monitoring site Ransomware.live logged a post in which the ransomware group BrainCipher claimed an attack on Gold Star. Per National Mortgage News, the group claims it took more than 10,300 documents, about 10.5 gigabytes — lead sheets, credit reports, tax documents, income documents and other files containing Social Security numbers. These are the attackers’ claims, based on screenshots; Gold Star has not confirmed them.
The gold star mortgage financial group data breach lawsuit says the breach occurred on or around September 24, 2026. As reported by Mortgage Professional, the complaint alleges Gold Star stored names, Social Security numbers, addresses and contact details without adequate encryption, did not use phishing-resistant multi-factor authentication, lacked adequate monitoring and training, and kept borrower data long after customer relationships ended. The plaintiff, a former borrower, alleges a sharp uptick in spam calls and emails and alerts that her data was found on the dark web. The suit pleads five legal theories, from negligence to the Michigan Consumer Protection Act, and asks for damages, annual security audits and lifetime identity-theft protection.
Case details
Bryant v. Gold Star Mortgage Financial Group, Corporation, No. 5:26-cv-13662, U.S. District Court for the Eastern District of Michigan, filed September 25, 2026 (some reports say September 26; the docket shows September 25). The case is assigned to Judge Judith Ellen Levy and referred to Magistrate Judge Curtis Ivy Jr. It seeks to represent all U.S. residents whose information was compromised — “at least thousands,” per the filing — and says aggregate claims exceed $5 million. An appearance was entered on the docket on October 2, 2026, and the court’s docket shows a show-cause entry on October 13, 2026, whose content we have not been able to read. We found no other data breach suit against Gold Star.
Status: Early Lawsuit, No Settlement
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Could Be Affected
The proposed class is everyone in the U.S. whose personal information was compromised in the incident. Gold Star is licensed in 47 states, per ClassAction.org, and has 318 sponsored loan originators across 51 branches, per National Mortgage News — so current and former borrowers, loan applicants and possibly employees could be involved.
The practical test is a notice letter. If Gold Star confirms a breach, it will have to notify affected people under state law. Keep any letter and envelope you receive; it states what was exposed and is your proof of membership. You do not need to sign up anywhere to be part of a class action.
Is There Money?
How cases like this one end
Our copy of the federal courts’ own case database covers 118,291 other personal injury casesclosed in U.S. federal district courts between 2015 and 2026, 3.9% of them filed as class actions:
- 39.6% ended in a settlement recorded by the court. Another 14% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 39.6% and 53.6%.
- 5.7% were decided on a motion before any trial.
- 1 in 109 reached a trial (0.9%), after a median of 23.9 months.
- Median time from filing to the end of the case: 9 months.
- Only 802 of them (0.7%) record a money award at all; the median of those is $537,500.
These are base rates for this type of case (federal other personal injury cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Gold Star Mortgage Breach Timeline
September 23, 2026 — Ransomware Claim Posted
Ransomware.live logs a BrainCipher post naming Gold Star. The group claims more than 10,300 documents, about 10.5 gigabytes.
September 24, 2026 — Alleged Breach Date
The complaint says the breach occurred on or around this date. Gold Star has not publicly confirmed it.
September 25, 2026 — Class Action Filed
A former borrower sues in the Eastern District of Michigan: Bryant v. Gold Star Mortgage Financial Group, No. 5:26-cv-13662.
October 2, 2026 — Defense Appearance
An appearance is entered on the docket. National Mortgage News reports no disclosure to state attorney general databases.
October 13, 2026 — Show-Cause Entry
The docket shows a show-cause entry on this date. Its content was not available to us.
As of October 18, 2026 — No Settlement
One proposed class action is pending. No official victim count, no settlement, no claim form and no deadline.
Three Things to Watch For
Stolen mortgage files are a ready-made script for fraud. Watch for these:
Calls about your mortgage “after the breach”
Credit reports and tax documents give a caller your loan details. A real servicer will not ask you to confirm your full Social Security number or change where you send payments over the phone — call the number on your statement.
“Gold Star settlement claim” sites
There is no settlement and no claims portal. Any page asking for your Social Security number or bank details to “secure your payment” is collecting data, not filing anything.
Fake breach notices with a link
Gold Star has not publicly confirmed the incident. An email or text claiming to be its breach notice and pushing a link or a credit-monitoring sign-up fee deserves suspicion; real notices arrive by mail and offer monitoring free.
Gold Star Mortgage Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Was Gold Star Mortgage actually hacked?
Not confirmed. The ransomware group BrainCipher claimed the attack in a post logged September 23, 2026, and a lawsuit alleges a breach on or around September 24, 2026. As of National Mortgage News’ reporting, Gold Star had not commented or filed any breach notice with a state attorney general.
What data may have been taken?
Per the attackers’ screenshots: lead sheets, credit reports, tax documents, income documents and other files with Social Security numbers. The lawsuit alleges names, Social Security numbers, addresses and contact details were exposed.
How many people are affected?
Unknown. No official count has been filed with any regulator, and the complaint estimates only “at least thousands.” The attackers claim more than 10,300 documents, which is not the same as a number of people.
Is there a Gold Star Mortgage data breach lawsuit?
Yes, one: Bryant v. Gold Star Mortgage Financial Group, Corporation, No. 5:26-cv-13662, filed September 25, 2026 in the U.S. District Court for the Eastern District of Michigan before Judge Judith Ellen Levy. It is a proposed class action and has not been certified.
Is there a settlement or claim form?
No. As of October 18, 2026 there is no settlement, no fund, no administrator, no claim form and no deadline. If that changes, class members are notified by a court-appointed administrator.
Do I need to do anything to be included?
No. If a class is certified or a settlement approved, you are included unless you opt out by the deadline in the official notice. Nothing has to be signed now.
I got a Gold Star breach letter in 2025. Is that this case?
Probably not. A breach-tracking site lists an Indiana attorney general filing for a separate Gold Star incident dated October 17, 2024 and reported January 10, 2025. The current lawsuit concerns the incident alleged in September 2026.
What is worth doing right now?
Freeze your credit at all three bureaus — free and reversible. Watch your mortgage statements and credit reports for unfamiliar inquiries or accounts. Treat unexpected calls about your loan with caution and keep any notice letter Gold Star sends.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Flagstar Data Breach SettlementA mortgage-lender breach that did settle: how that fund works
- Academy Mortgage SettlementAnother mortgage lender breach case, now with a preliminary deal
- Data Breach Settlement CalculatorRough per-person ranges from comparable breach settlements
- Open Class Action SettlementsSettlements you can file a claim in right now