Where does the HomeTrust Mortgage Company case file come from?

Every entry is taken from the breach report HomeTrust Mortgage Company lodged with the Massachusetts Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: HomeTrust Mortgage Company Data Breach

This file collects the dated facts on record for the HomeTrust Mortgage Company incident. The state report is dated June 16, 2025.

Timeline

June 16, 2025Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: June 16, 2025
Receiving office: Massachusetts Attorney General

Case notes

HomeTrust Mortgage Company, a financial institution operating in Massachusetts, formally filed a report regarding a data security incident on June 16, 2025. The company specializes in residential mortgage lending, a process that inherently involves collecting and storing significant amounts of sensitive customer financial data.

The public filing indicates that the incident is currently under investigation. Information regarding the exact nature of the breach, such as the specific cause or method of compromise, was not detailed. Similarly, the number of individuals whose personal information may have been exposed and the precise categories of data involved were not specified in the initial report.

Given HomeTrust Mortgage Company's role in processing mortgage applications and servicing, its systems are entrusted with a broad array of private financial records. While the specific data types affected were not disclosed, individuals associated with the company should proceed with the understanding that their personal information could have been compromised.

For those who may receive a direct notification from HomeTrust Mortgage Company, it is advisable to remain vigilant. Regularly review all financial account statements, credit card transactions, and explanations of benefits for any unauthorized or suspicious activity. Promptly report any discrepancies to the relevant institution.

Another key step is to monitor your credit reports by obtaining free copies from Equifax, Experian, and TransUnion. Look for unfamiliar accounts or inquiries that you do not recognize. Placing a fraud alert or a security freeze on your credit files can add an extra layer of protection by making it more difficult for identity thieves to open new accounts in your name.

Questions about this case file

Where does the HomeTrust Mortgage Company case file come from?: Every entry is taken from the breach report HomeTrust Mortgage Company lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Named in the HomeTrust Mortgage Company breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files