Impac Mortgage Data Breach Lawsuit Investigation
If you received a letter dated March 27, 2026 about a cybersecurity incident at Impac Mortgage, your Social Security number and other personal details may have been exposed. Contact a data-privacy attorney to understand your legal options and secure free credit monitoring today.
What Happened?
Impac Mortgage Holdings, Inc. (“Impac Mortgage”) detected indications of unauthorized access to its computer systems on March 20, 2024. An extensive investigation later confirmed that an unknown actor may have accessed certain files and folders between February 21 and March 20, 2024.
Key Incident Dates
February 21, 2024: Unauthorized access began.
March 20, 2024: Intrusion ended and was discovered.
March 27, 2026: Consumer notification letters mailed.
April 17, 2026: Incident reported to the California Attorney General.
Information Exposed
The review of compromised files revealed the following data elements:
Name
Social Security number
Company Response
According to the notice filed with regulators, Impac Mortgage:
Secured affected systems upon discovery.
Launched an extensive forensic investigation.
Reported the incident to federal law-enforcement authorities.
Added additional administrative safeguards to reduce future risk.
Offered complimentary credit monitoring and identity-protection services through Cyberscout (a TransUnion company).
Your Next Steps
Enroll in the free Cyberscout credit-monitoring service as outlined in your letter.
Review bank, credit-card, and mortgage statements for unfamiliar charges.
Request free credit reports and place fraud alerts or credit freezes if necessary.
Keep all correspondence and receipts related to identity-theft prevention for potential reimbursement or legal claims.
Company Overview
Impac Mortgage Holdings, Inc. (“Impac Mortgage”) is a mortgage-finance company headquartered in Irvine, California.
Website: impaccompanies.com
Headquarters: 19800 MacArthur Blvd., Suite 500, Irvine, CA, USA
Industry: Mortgage Finance
Year Founded: 1995
Ticker: OTC Pink: IMPM
Social: Facebook, LinkedIn, X (Twitter)
Sources
Impacted Entities
Frequently Asked Questions
I received a data breach letter from Impac Mortgage — what should I do?
Follow the activation steps for the free Cyberscout credit-monitoring service and watch your financial accounts and credit reports closely for any suspicious activity.
How do I submit a claim related to the Impac Mortgage data breach?
Gather your breach notice, copies of any fraudulent charges, and speak with a data-privacy attorney about filing a claim for potential reimbursement and damages.
Am I eligible to join a lawsuit against Impac Mortgage?
You may qualify if your name and Social Security number were part of the compromised data set. Retain your notice letter and any evidence of identity theft.
What information did the Impac Mortgage breach expose?
The incident involved names and Social Security numbers stored in company files.
Did Impac Mortgage offer credit monitoring, and for how long?
Yes. Free Single-Bureau Credit Monitoring, Credit Report, and Credit Score services are available through Cyberscout. Enrollment instructions are provided in the mailed notice.
How many people were affected by the Impac Mortgage breach?
The company has not publicly disclosed the total number of impacted individuals.
How can I get the official breach notice (PDF) for Impac Mortgage?
You can download the redacted notice using the “Download Official Breach Notice” button above.
Attorney Advertising. Prior results do not guarantee a similar outcome.
