New American Funding, LLC

New American Funding, a nationwide mortgage lender based in Tustin, California, disclosed a data breach in July 2025 that traced back to one of its vendors, Mobile Notary Zone, a company that provided notary services for the lender's loan closings. According to a filing with the California Attorney General reported by HousingWire, the company discovered on June 6, 2025 that an unauthorized actor gained access to systems containing New American Funding consumer data at the vendor and may have taken documents. The lender stressed that its own internal systems were not compromised. Our investigation team indexes the incident to July 11, 2025, the date the company filed breach notifications, with 38,194 rows of consumer data associated with the listing. No ransomware or hacking group has publicly claimed responsibility.

Breach Timeline

June 6, 2025: New American Funding discovered suspicious activity tied to information it had provided to Mobile Notary Zone and opened an investigation, according to the company's disclosure.

June 26, 2025: The company completed its review of the incident, per its Attorney General filing reported by HousingWire.

July 11, 2025: New American Funding filed breach notifications with state attorneys general, including California and Washington, and began mailing notices to consumers whose information was involved.

July 15, 2025: HousingWire reported on the disclosure, noting that Mobile Notary Zone had provided little information about the incident and had not responded to a request for comment.

What Information Was Compromised?

Our analysis found the following data types in this breach: Social Security numbers, email addresses, phone numbers, and names.

The company's Attorney General filing, as reported by HousingWire, indicated the data potentially accessed included names, addresses, Social Security numbers, financial account information, and other information associated with the loan closing process. Because the vendor supplied little detail about exactly which records were taken, New American Funding notified all clients whose information had been shared with Mobile Notary Zone rather than only confirmed victims.

Not every individual is affected by every type of data listed here.

What Are the Potential Risks for Affected Individuals?

Mortgage closing documents combine several high-value data points, and the exposure of Social Security numbers alongside financial account information creates a real risk of identity theft. Criminals with this combination can attempt to open new accounts, file fraudulent tax returns, or apply for loans in someone else's name. Email addresses and phone numbers in the dataset also enable targeted phishing, where scammers pose as mortgage lenders, insurers, or title companies to extract further details or payments. Because the stolen material relates to active or recent home loans, affected borrowers should treat any unexpected communication about their mortgage with suspicion.

What Is New American Funding, LLC Doing in Response?

According to the company's disclosure, New American Funding terminated its relationship with Mobile Notary Zone, alerted law enforcement and federal regulators, and worked with outside investigators to review the incident. The company began mailing notification letters in July 2025 and stated that all affected customers would be offered free credit monitoring and identity protection services. Washington's Attorney General filing placed the number of affected state residents at 1,991.

What Should You Do If You Were Affected?

If you had a loan or closing handled by New American Funding, take these steps:

Check your mail for a notification letter and follow its instructions, including any offer of free credit monitoring.

Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion. A freeze is free and blocks most new credit applications in your name.

Review your bank, credit card, and mortgage statements for activity you do not recognize.

Be cautious with calls, texts, or emails claiming to be from your lender, title company, or insurer. Verify requests through official phone numbers, not links in messages.

If you spot signs of identity theft, report it at IdentityTheft.gov and notify the affected institutions.