Plaza Home Mortgage Lawsuit: The 2026 Data Breach Class Actions
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
The Plaza Home Mortgage lawsuit people are searching for is the data breach litigation. Plaza, a San Diego wholesale and correspondent lender, says an outsider got into one employee’s computer on or around February 17, 2026. A report to the Maine Attorney General put the count at 137,976 people — borrowers, mortgage applicants and employees. At least four class actions are pending in federal court in San Diego. As of October 12, 2026 there is no Plaza Home Mortgage settlement, no claim form and no deadline.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuits Say Happened
Plaza’s notice letter says threat actors accessed one employee’s computer on or around February 17, 2026. The data that may have been taken includes names, addresses, Social Security numbers, birth dates, driver’s license or other government ID numbers, and information from mortgage loan applications and servicing. For employees, usernames and passwords were also involved. Not every person lost every field.
According to the Maine filing, the breach was discovered on March 3, 2026. Letters went out on May 29, 2026. The lawsuits allege that this was too slow: the Grubb complaint says Plaza waited “more than three months” to notify people. The Powell complaint, filed for employees, alleges the breach may have begun as early as September 12, 2025.
A criminal group claimed responsibility on February 27. Plaza has said it was not a ransomware attack. That is a disputed claim, not a finding.
Case Details
All four breach suits we could confirm are in the U.S. District Court for the Southern District of California, where Plaza is based:
Grubb v. Plaza Home Mortgage, Inc., No. 3:26-cv-03403, filed June 4, 2026, for consumers and mortgage applicants.
Powell v. Plaza Home Mortgage, Inc., No. 3:26-cv-03405, filed June 4, 2026, for current and former employees.
Regehr v. Plaza Home Mortgage, Inc., No. 3:26-cv-03476, filed June 9, 2026.
Skellie v. Plaza Home Mortgage Inc., No. 3:26-cv-03590, filed June 17, 2026.
All four are listed before Judge Marilyn L. Huff. Skellie was first assigned to Judge Cynthia Bashant. Between July 31 and August 7, 2026, Plaza filed motions, some of them joint, to stay deadlines in each case pending consolidation.
Status: Active Lawsuits, No Settlement
There is no settlement, no fund, no settlement administrator, no claim form and no deadline. Plaza used Simpluris as the notice administrator for its breach letters, but that is not a class settlement. If a settlement is ever reached, the court must approve it first, and class members would get an official notice.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Is Covered by the Proposed Classes
The complaints seek to represent people whose information was exposed in the breach. The Grubb case is for consumers and mortgage applicants. The Powell case is for current and former employees, and that complaint puts the employee group at more than 40,000.
The practical test is your mail. Plaza mailed notice letters starting May 29, 2026. Many borrowers never dealt with Plaza directly, because Plaza works through mortgage brokers and correspondent lenders. So your letter may be the first time you see the Plaza name. Keep the letter. It shows which of your data was involved, and it is your best proof if a settlement ever comes.
You don’t need to sign up anywhere to be part of a class action.
Is There Any Money?
What you can get now is the protection Plaza offered: 12 months of free credit monitoring and identity theft services through CyEx. Enroll using the activation code in your own letter, if the enrollment deadline printed there has not passed.
For a sense of how comparable cases have ended, see the Academy Mortgage breach settlement and the data breach settlement calculator. Those are context, not a forecast for Plaza.
How cases like this one end
Our copy of the federal courts’ own case database covers 129,730 other contract casesclosed in U.S. federal district courts between 2015 and 2026, 6% of them filed as class actions:
- 30.7% ended in a settlement recorded by the court. Another 20.2% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 30.7% and 50.9%.
- 7.5% were decided on a motion before any trial.
- 1 in 72 reached a trial (1.4%), after a median of 29.3 months.
- Median time from filing to the end of the case: 7.6 months.
- Only 7,691 of them (5.9%) record a money award at all; the median of those is $407,000.
These are base rates for this type of case (federal other contract cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Plaza Home Mortgage Lawsuit Timeline
- 1
February 17, 2026 — Employee Computer Accessed
Plaza says threat actors got into one employee’s computer. A criminal group later claims the attack, and Plaza says it was not ransomware.
- 2
March 3, 2026 — Breach Discovered
This is the discovery date in Plaza’s report to the Maine Attorney General. That report counts 137,976 people affected nationwide.
- 3
May 29, 2026 — Notice Letters Mailed
Plaza notifies customers and employees and offers 12 months of CyEx credit monitoring. Simpluris handles the notices.
- 4
June 4–17, 2026 — Four Class Actions Filed
Grubb, Powell, Regehr and Skellie are filed in the Southern District of California. Grubb alleges Plaza waited more than three months to notify people; Powell accuses it of handling data in a reckless manner.
- 5
July 31 – August 7, 2026 — Motions to Stay Pending Consolidation
Plaza files motions in each case, some joint, to pause deadlines while the suits are combined before Judge Marilyn L. Huff.
- 6
October 9, 2026 — Plaza Answers Amended Complaint
Plaza files an answer to an amended complaint in the Grubb case. As of October 12, 2026 there is no settlement and no claim form.
Three Things to Watch For
A breach involving Social Security numbers and mortgage files, with lawsuits but no settlement, attracts imposters:
“Claim your Plaza settlement payment” messages
No settlement exists, so there is nothing to claim. Any site or text asking for your Social Security number or bank details to “release” a Plaza payment is a scam.
Calls or emails about your loan “because of the breach”
The stolen files include mortgage application and servicing data, so a scammer can quote your loan details. Don’t change where you send mortgage payments based on a call or email. Check with your servicer using the phone number on your statement.
Fake credit-monitoring enrollment
The real offer is CyEx, which you enroll in with the activation code printed in your letter. Plaza’s information page is financialshield.com/plaza-home-mortgage. Don’t use links from unexpected messages.
Plaza Home Mortgage Lawsuit — Questions People Actually Ask
Is there a Plaza Home Mortgage settlement?
Not for the data breach. As of October 12, 2026, the class actions in San Diego federal court are active. There is no settlement, fund, claim form or deadline. On October 9, 2026, Plaza answered an amended complaint in the Grubb case.
What happened in the Plaza Home Mortgage data breach?
Plaza says an outsider accessed one employee’s computer on or around February 17, 2026. Names, addresses, Social Security numbers, birth dates, ID numbers and mortgage application and servicing information may have been taken. A report to the Maine Attorney General counts 137,976 people.
Is the Plaza Home Mortgage breach letter real?
Plaza mailed notices starting May 29, 2026, through its notice administrator Simpluris. The company points people to financialshield.com/plaza-home-mortgage. The letter offers 12 months of CyEx monitoring. If you’re unsure about a letter, check it against that page instead of calling a number in an email.
Which Plaza Home Mortgage lawsuits have been filed?
We confirmed four in the Southern District of California: Grubb (3:26-cv-03403), Powell (3:26-cv-03405), Regehr (3:26-cv-03476) and Skellie (3:26-cv-03590). All are listed before Judge Marilyn L. Huff. Plaza moved to pause deadlines pending consolidation.
Do I have to do anything to be included?
No. You don’t join a class action by signing up. If a class is certified or a settlement is approved, class members get an official notice, and that notice controls the deadlines. Keep your breach letter.
What was the earlier Plaza Home Mortgage $3 million settlement?
That was a separate 2013 Justice Department fair-lending case, United States v. Plaza Home Mortgage, Inc., No. 13cv2327-H (S.D. Cal.). It alleged that Plaza’s brokers charged African-American and Hispanic borrowers higher fees. Plaza admitted no violation and agreed to a $3 million fund. The Justice Department, not the borrowers, identified who would be paid. It has nothing to do with the 2026 breach.
What happened to PHH Mortgage — is it the same company?
No. PHH Mortgage Corporation is a different company. It now appears in court filings as Onity Mortgage Corporation, formerly known as PHH Mortgage Corporation. This page covers only Plaza Home Mortgage.
What should I do right now?
If the enrollment deadline in your letter has not passed, enroll in the free CyEx monitoring using the code in your letter. Put a fraud alert or a credit freeze on your files with Equifax, Experian and TransUnion. Watch for calls or emails that quote your loan details. Keep the letter in case a settlement is ever announced.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Academy Mortgage Breach Settlement
A mortgage-lender breach case that has reached a settlement
Mortgage Investors Group Settlement
Another lender breach, open for claims with a dated deadline
Open Class Action Settlements
Settlements currently accepting claims, with deadlines
Data Breach Settlement Calculator
Estimate what breach settlements typically pay per person