If you took out a mortgage through Cornerstone First Mortgage, your Social Security number may have been sitting in the hands of unauthorized parties for more than two years before you ever heard a word about it. The breach happened in the summer of 2023. The company didn't catch it until September 2025. Notice letters went out in March 2026.
Two years. That's how long the gap was between the intrusion and the discovery.
By the time most affected borrowers learned anything had happened, criminals had already had ample time to do whatever they wanted with the stolen information. If you received a Cornerstone First Mortgage data breach notice letter, or if you used the company for a home loan and you're worried, you may qualify to join a class action lawsuit and collect compensation for what this breach has cost you.
You may be eligible to join a Cornerstone First Mortgage data breach class action if the following apply to you:
You do not need to have lost money already to qualify. Class action lawsuits in data breach cases routinely seek compensation for loss of privacy, time spent on protective measures, out-of-pocket expenses, and the future risk of identity theft, on top of any direct financial losses already suffered. See if you qualify for the lawsuit
If you used Cornerstone First Mortgage at any point and your information may have been exposed, take a few minutes to find out exactly where you stand. Submit your details through the eligibility form on this page and a class action attorney will review your situation at no cost.
There is no fee to check. No obligation to take action afterward. And in the event a lawsuit is filed, these cases are handled on a contingency basis, meaning you owe nothing unless compensation is recovered.
Here are the basics in plain English:
No settlement has been reached at this time. The Cornerstone First Mortgage data breach is in the early investigation phase, which is the stage where attorneys evaluate the strength of potential claims, identify affected borrowers, and prepare to file a class action complaint.
Here is what that means for you in practical terms.
When a class action is filed and certified, every person who fits within the defined class is automatically included unless they take affirmative steps to opt out. You do not have to file your own individual lawsuit to recover money. The lead plaintiffs and their attorneys handle the litigation on behalf of the entire group. If the case settles or wins at trial, eligible class members receive notice and an opportunity to submit a claim form for their share of the recovery.
In data breach cases like this one, settlements typically include several categories of compensation. Class members can recover documented out-of-pocket losses such as fraudulent charges, fees paid to credit monitoring services, and costs associated with identity theft remediation. Settlements also commonly include a flat cash payment available to every class member regardless of documented losses, sometimes called a base award, which compensates for the loss of privacy and the time spent dealing with the breach. Many settlements also provide several years of free credit monitoring and identity theft protection services. In cases where the company's conduct was particularly negligent, settlements may include enhanced relief for victims of confirmed identity theft, sometimes reaching into the thousands of dollars per affected individual.
The two year detection gap in the Cornerstone First Mortgage breach is the kind of fact that strengthens a class action. Companies have a legal obligation to monitor their systems and detect intrusions in a reasonable timeframe. Allowing unauthorized access to sit undiscovered for that long raises serious questions about whether the company met basic cybersecurity standards. Those questions tend to translate into stronger settlement leverage for the plaintiffs.
While the lawsuit develops, there are concrete steps every affected borrower should take immediately. These actions matter regardless of whether you join the class action.
Place a credit freeze with all three major credit bureaus, Equifax, Experian, and TransUnion. A freeze is free and prevents new accounts from being opened in your name. Pull your credit reports and review them line by line for any account or inquiry you do not recognize. Sign up for credit monitoring if it has been offered to you through the breach notice. Watch your bank and credit card statements closely for unauthorized charges, even small test charges of a few dollars, which fraudsters sometimes use to verify a card before making larger purchases. File a report with the Federal Trade Commission at IdentityTheft.gov if you spot any suspicious activity. Hold onto your data breach notice letter. That document is evidence that you were affected and will be relevant if you later need to submit a claim.
Be especially cautious of phishing attempts in the months following the breach. Criminals who buy stolen mortgage data often use it to send convincing emails and text messages designed to harvest more information or money. Anyone calling you about your Cornerstone account or asking you to confirm personal details over the phone should be treated with extreme skepticism.
When a company holds your most sensitive data and fails to protect it, the financial consequences fall on you. The hours you spend on credit freezes, the years of anxiety wondering if your identity will be stolen, the actual losses if it is. Cornerstone has lawyers. Their insurance carrier has lawyers. They handle these cases routinely and they count on individual borrowers either not knowing their rights or not having the resources to pursue them.
A class action changes that math entirely. Hundreds or thousands of affected borrowers are represented together by attorneys who specialize in data breach litigation, with the legal and financial resources to take on a national lender. The cost of pursuing the case is borne by the law firms handling it, not by the individuals affected. That structure is what makes meaningful accountability possible in cases like this one.
The Cornerstone First Mortgage data breach exposed information you trusted the company to protect. You did everything right. You filled out the application, signed the documents, and assumed your data would be handled responsibly. It wasn't.
You deserve to know what your options are. Submit your information through the eligibility form on this page and a class action attorney will be in touch to walk you through the next steps. There is no cost to find out where you stand, and no obligation to do anything afterward. Find out if you qualify today.
Sources:
