Nations Direct Mortgage Data Breach Settlement: What You Need to Know

Nations Direct Mortgage Data Breach Settlement Offers Compensation to 83,000+ Affected Consumers

More than 83,000 people whose personal information was stolen in a cyberattack on Nations Direct Mortgage will receive financial compensation and credit monitoring under a class action settlement announced in December 2025. The deal resolves allegations that the Santa Ana, California-based wholesale mortgage lender failed to adequately protect customer and employee data during a December 2023 breach that exposed Social Security numbers, birth dates, and loan information.

The Data Breach: What Happened

The cyberattack hit Nations Direct Mortgage on December 30, 2023, when hackers gained unauthorized access to company files containing names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, and loan numbers of customers and employees. According to the company, the intrusion was detected the same day it occurred.

Nearly two months passed before affected individuals learned their data had been compromised. Nations Direct Mortgage finally sent notification letters on February 28, 2024.

The lawsuit, Kuhn, et al. v. Nations Direct Mortgage, LLC, was filed April 2, 2024, in Circuit Court for Walton County, Florida. Plaintiffs claimed the mortgage lender hadn't implemented reasonable cybersecurity measures to safeguard sensitive personal information. While Nations Direct Mortgage denied any wrongdoing, the company agreed to settle rather than continue litigating.

Who Is Affected by This Settlement

Approximately 83,108 U.S. residents who received breach notification letters are covered by the settlement. This includes both a general class of affected customers and employees, plus a separate California subclass entitled to additional compensation.

The settlement excludes judges, court staff, anyone who properly opted out, the perpetrators themselves, and government entities.

Anyone who got a breach notification from Nations Direct Mortgage after the December 30, 2023, attack can check their eligibility and file a claim at ndmsettlement.com.

Settlement Benefits and Compensation

The agreement provides several layers of protection and reimbursement for class members.

Direct Cash Compensation

Class members can claim up to $2,750 for documented losses stemming from the breach—things like fraudulent charges, identity theft fees, credit freeze costs, and other out-of-pocket expenses. You'll need receipts, invoices, or similar proof to support these claims.

Time spent dealing with the breach is compensable up to $50, calculated at $25 per hour for up to two hours of documented effort.

California residents get an automatic $75 payment on top of any other benefits they're entitled to claim.

Credit Monitoring and Identity Theft Protection

Every settlement class member receives two years of free credit monitoring that includes $1 million in identity theft insurance coverage. The service monitors dark web activity, credit reports, and public records for signs that personal information is being misused. Those already enrolled in credit monitoring through Nations Direct Mortgage when the settlement was reached get an additional two years tacked onto their existing coverage.

Why This Settlement Matters to Consumers

Data breaches involving Social Security numbers, birth dates, and financial information create lasting risks. The type of information stolen in the Nations Direct Mortgage breach is precisely what identity thieves need to open fraudulent accounts, file false tax returns, or commit other financially damaging crimes.

By offering extended credit monitoring and identity theft insurance, the settlement recognizes that victims of data breaches face elevated fraud risks for years after the initial incident. The documented loss compensation acknowledges that many people had to spend time and money protecting themselves after the company's security failures put their information at risk.

Timeline of Events

The case moved through the legal system over nearly two years:

December 30, 2023: Hackers breach Nations Direct Mortgage systems; company detects unauthorized access the same day.

February 28, 2024: Breach notification letters finally go out to affected individuals.

March 15, 2024: Law firms announce they're investigating the breach.

April 2, 2024: Class action lawsuit filed in Florida circuit court.

December 2, 2025: Settlement agreement announced.

December 23, 2025: Deadline to opt out of the settlement or object to its terms.

January 7, 2026: Claims must be submitted by this date.

January 22, 2026: Final approval hearing scheduled for 10:15 a.m.

How to File a Claim

To receive settlement benefits, you need to submit a claim through ndmsettlement.com by January 7, 2026. The website has all the necessary forms and spells out what documentation you'll need.

For reimbursement of expenses up to $2,750, gather receipts, invoices, or other proof of costs you incurred because of the breach. If you're claiming the $50 for lost time, you may need to document how you spent those hours addressing breach-related problems. California residents seeking the extra $75 should have proof of residency ready.

Important Considerations

Nations Direct Mortgage didn't admit liability or any security failures as part of the settlement. The company simply agreed to pay to resolve the litigation. The total settlement amount hasn't been publicly disclosed.

The information exposed in this breach puts affected individuals at heightened risk for identity theft and fraud. When criminals have your name, address, phone number, email, date of birth, and Social Security number, they have virtually everything needed to impersonate you. The two years of credit monitoring is helpful, but victims should remain vigilant well beyond that period.

What Affected Consumers Should Do

If you received a breach notification from Nations Direct Mortgage, start by visiting ndmsettlement.com to confirm your eligibility and review the claims process.

Collect documentation of any breach-related expenses—credit monitoring fees you paid yourself, costs for placing or lifting credit freezes, charges for certified mail when disputing fraudulent accounts, whatever you spent addressing the situation. Track the time you devoted to these tasks and keep notes about what you did.

California residents should locate proof of residency for the additional benefit.

Get your claim submitted before the January 7, 2026, deadline. Don't wait until the last minute—gathering documentation can take longer than expected.

Sign up for the credit monitoring service provided through the settlement, even if you're already monitoring your credit through another service. Additional monitoring layers provide extra protection.

Check your credit reports regularly with all three major bureaus for accounts or inquiries you didn't authorize. Consider placing a fraud alert or security freeze on your credit files if you haven't already done so.

The settlement in Kuhn, et al. v. Nations Direct Mortgage, LLC offers meaningful compensation and protection for people whose personal information was exposed because of the company's alleged cybersecurity failures. With up to $2,750 available for documented losses, extra compensation for California residents, and two years of comprehensive monitoring, affected consumers have an opportunity to recoup some of their losses and guard against future identity theft. The claims process requires effort, but given the sensitivity of the information compromised, it's worth the time to protect yourself.