Union Home Mortgage Corp. Data Breach Notice (Oregon Attorney General)

The filing from Union Home Mortgage Corp. states that personal information belonging to 425,538 people was exposed in an incident on May 27, 2025. The company submitted its notification to the Oregon Department of Justice on September 11, 2025 — 107 days later.

If you received a letter from Union Home Mortgage Corp., your personal information was among the records involved in that incident. The company is required to notify affected individuals directly, usually by post. Absence of a letter usually means you were not in the affected group, but anyone who has moved since May 27, 2025 should contact the company directly to confirm their status.

Personal Information Remains Valuable Long After the Breach

The exposed category listed in the filing is personal information. While the exact fields are not broken down beyond that term, records held by a mortgage company commonly include name, address, date of birth, Social Security number, income details, bank account information used for payments, and loan or mortgage history.

Unlike a password, which can be changed, this type of personal information cannot be reissued. A Social Security number stays the same for life. Bank account or loan details tied to your identity also remain fixed. That permanence is what keeps the data valuable to identity thieves years later.

No passwords or login credentials were exposed. This means your Union Home Mortgage online account itself was not directly compromised through this incident. That is genuinely good news and removes one immediate worry.

What Thieves Can Do With Mortgage-Related Personal Data

With name, Social Security number, and financial history together, attackers can attempt to open new accounts, file fraudulent tax returns, or apply for loans and credit cards in your name. Mortgage and loan records often contain enough detail to make these attempts appear legitimate to initial automated checks.

Existing mortgage or loan accounts could also become targets for account takeover if the attacker combines this data with other information obtained elsewhere. Because the breach happened more than three months before notification, there has been time for the data to circulate.

The 107-day gap between the May 27 incident and the September 11 filing is the most notable detail in the record. Notification timelines vary by state and depend on when an investigation concludes, so the interval alone does not prove fault. It does, however, give readers a clear timeline to consider when deciding how urgently to act.

The Difference Between What Was Exposed and What Was Not

The filing does not list medical information, driver’s license numbers beyond what might fall under generic personal information, or any biometric data. It also does not mention passwords, and the record contains no indication that customer login credentials were taken.

This limits the immediate risk to your existing Union Home Mortgage account. However, the combination of identity details and financial history still creates meaningful long-term exposure for identity theft and fraud.

How to Check Whether You Are Affected

The most reliable indicator remains the letter. Union Home Mortgage Corp. must notify each affected Oregon resident directly. If you have not received one and have lived at the same address since May 27, 2025, it is likely your records were not included. Those who moved during or after that period should reach out to the company to verify their status.

Concrete Steps That Address This Exposure

• Place a fraud alert or credit freeze with the three major credit bureaus. This is the single most effective action. A freeze stops new accounts from being opened in your name. It is free and can be lifted when you need to apply for credit.
• Review your credit reports from Equifax, Experian, and TransUnion. Look for accounts or inquiries you do not recognize. Dispute anything suspicious immediately.
• Monitor bank and credit card statements closely for the next 12 to 24 months. Small test charges often precede larger fraud. Report unauthorized transactions right away.
• File your taxes early and respond quickly to any IRS notices. Tax refund fraud is common when Social Security numbers are exposed. Submitting early reduces the window for thieves.
• Contact Union Home Mortgage Corp. directly if you have questions about your specific loan or account records. They can confirm what information of yours was involved and whether any protective measures have already been applied to your file.

The exposure of personal information from a mortgage lender does not require panic, but it does require ongoing attention. The data cannot be made secret again. What you can control is how quickly you detect and respond to any misuse.