Impac Mortgage Holdings, Inc., a company involved in mortgage lending and servicing, has reported a data security incident to the Washington Attorney General on April 17, 2026. The company disclosed that its digital infrastructure was compromised, leading to unauthorized access to customer data.
The exposed information includes highly sensitive personal and financial details. The data types confirmed to be affected are Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Credit Score Information, Mailing Address, and Income and Employment Details. This combination of data can pose serious risks to affected individuals.
Such a breach creates significant potential for long-term identity theft and various forms of financial fraud. With Social Security Numbers and banking information exposed, victims could be vulnerable to fraudulent accounts being opened in their name, unauthorized loans, or even tax fraud. Monitoring financial accounts and credit reports closely is an immediate step for those affected.
As a financial institution, Impac Mortgage Holdings, Inc. is subject to strict regulations regarding data protection, including federal and state laws that mandate robust security measures for customer information. The occurrence of this breach suggests potential failures in upholding these crucial safeguards, which are designed to protect consumer data from unauthorized access.
If you have received a data breach notification letter from Impac Mortgage Holdings, Inc., it indicates your personal information was compromised. This notification establishes a legal basis for you to explore potential claims. Our firm is currently investigating class action claims on behalf of individuals affected by this incident.
Receiving a notification letter means you have standing to pursue legal recourse, even if you haven't yet experienced direct financial losses. The increased risk of future harm and the expenses incurred to mitigate that risk are recognized as actionable damages. We offer a free case review for those impacted, and operate on a contingency fee basis, meaning no out-of-pocket costs unless we recover compensation for you.
This incident highlights the ongoing vulnerabilities in the financial sector's data security. Individuals who entrusted Impac Mortgage Holdings with their sensitive data deserve to understand their rights and explore options for accountability and potential compensation.