Skip to content
Gold Star Mortgage Hit by Ransomware, Faces Class Action Lawsuit

Gold Star Mortgage Hit by Ransomware, Faces Class Action Lawsuit

First seen 29 Sep 2026, 21:04 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 29, 2026 at 21:05 UTC

Gold Star Mortgage Financial Group is facing a class action lawsuit after the ransomware group BrainCipher claimed to have stolen over 10,300 documents from the lender's IT network. The lawsuit, filed by a former borrower, alleges that Gold Star failed to adequately protect sensitive personal information, including Social Security numbers and addresses. The breach reportedly occurred around September 24, 2026, and the lawsuit seeks to represent thousands of affected individuals, with claims exceeding $5 million. The lender has not confirmed the breach or disclosed any details to state attorneys general. This incident is part of a troubling trend, as multiple mortgage lenders have been targeted by ransomware gangs recently, with significant data theft reported. The lawsuit highlights alleged failures in Gold Star's cybersecurity measures, including inadequate encryption and lack of multi-factor authentication. The situation is still developing as the lawsuit awaits certification.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-24
Ransomware attack on Gold Star Mortgage
BrainCipher claims to have exfiltrated over 10,300 documents from Gold Star's network.
Mpamag
2026-09-25
Class action lawsuit filed
A former borrower filed a lawsuit against Gold Star for failing to protect personal data after the ransomware attack.
Mpamag
2026-09-28
News coverage of the incident
Nationalmortgagenews reported on the class action lawsuit and the alleged data breach at Gold Star Mortgage.
Nationalmortgagenews

More articles in this cluster (2)

Following this threat?

Track BrainCipher and Flagstar in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed