Union Home Mortgage data breach: Lessons and hardening checklist for CISOs

Union Home Mortgage disclosed that files containing sensitive personal information (including names, SSNs, driver’s license/state ID numbers, full dates of birth, passport numbers, and financial/banking data) were exposed to an unauthorized party in 2025, affecting at least 25,810 people and triggering a putative class-action alleging failures in basic security controls; the report summarizes confirmed facts, legal allegations, expected cost impacts, recommended industry-standard safeguards (NIST/CIS/GLBA-aligned), a focused one-week PII hardening checklist for CISOs, and concludes with a ThreatLocker product pitch.