People whose personal information was involved in two 2026 cybersecurity incidents at Lennar and Lennar Mortgage may be covered by a proposed class action alleging Lennar Corporation and Lennar Mortgage, LLC failed to protect customer and employee data. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes class action complaints. The statements below are unproven allegations. Lennar Corporation and Lennar Mortgage, LLC have not admitted wrongdoing and have not been found liable, there is no certified class, and there is nothing to claim at this time. This page is informational. It is not legal advice.
What Happened at Lennar?
Lennar Corporation, the Miami-based homebuilder, and its lending arm, Lennar Mortgage, LLC, have disclosed cybersecurity incidents from 2026 that were followed within days by proposed class actions in federal court in Miami. A Lennar spokesperson told HousingWire that the company identified “two separate and, we believe, unrelated social engineering-based cybersecurity events” involving unauthorized access to certain company systems, one within Lennar and one within Lennar Mortgage.The lawsuits describe the same two events from the plaintiffs’ side. A complaint filed August 17, 2026, No. 1:26-cv-25575, alleges that cybercriminals got into Lennar’s systems and took files containing personal information around March 2026, and did so again between May and June 2026. It calls them the March and May data breaches.
According to HousingWire, the Lennar Mortgage notice says the company discovered a potential issue in part of its information systems on June 1, 2026, and that its investigation found an unauthorized party had used social engineering to access some systems between May 26 and June 1. The company finished reviewing the information involved on August 4. The complaint says Lennar posted a public letter about the May–June incident around August 11, 2026.
That letter, as quoted in the complaint, lists names, contact information, dates of birth, Social Security numbers, passport or other government ID information, driver’s license or other state ID information, and financial account information. HousingWire reported that the notice also says a very small number of people may have had medical-related information involved and that not every person was affected by every category. The notice says the company is not aware of any misuse of the information, and that it hired Kroll to provide two years of complimentary identity monitoring to affected individuals.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
How Many People Were Affected?
No national total has been confirmed. Lennar has not published one, and the complaint in No. 1:26-cv-25575 puts the number only at “tens of thousands” of customers and employees.One state figure has been reported. The Texas attorney general’s data breach listing shows 60,526 Texans affected, according to HousingWire, which reported the figure alongside the Lennar Mortgage notice. That number counts only Texas residents, so it is not a measure of the full incident, and no national total has been published.
The Lawsuits Have Been Consolidated in Miami
The first suit, No. 1:26-cv-25518, was filed August 14, 2026 in the U.S. District Court for the Southern District of Florida and assigned to Chief Judge Cecilia M. Altonaga. It is now the lead case. Court records on CourtListener show at least nine data breach suits against Lennar filed in the same court between August 14 and August 28, 2026. The key steps so far:- August 14, 2026 — No. 1:26-cv-25518 filed; it becomes the lead case.
- August 17 — No. 1:26-cv-25575 filed against Lennar Corporation and Lennar Mortgage, LLC. Its complaint is the source of the allegations described below.
- August 21 — plaintiffs file a joint motion to consolidate the cases and appoint interim co-lead counsel; No. 1:26-cv-25575 is among the cases it lists.
- August 24 — the court denies that joint motion.
- August 26 — the court consolidates Nos. 1:26-cv-25529 and 1:26-cv-25731 into the lead case.
- September 2 — a renewed motion to appoint interim co-lead counsel is denied without prejudice, meaning it can be brought again.
- September 9 — the court gives plaintiffs until September 23, 2026 to file a consolidated amended complaint, and gives the defendants a later date in October to respond.
- September 11 — a third consolidation order folds in Nos. 1:26-cv-25616, 1:26-cv-25763 and 1:26-cv-25820; the last of those was brought against Lennar Mortgage.
Consolidation means the cases move forward together before one judge, on one schedule and, once filed, one consolidated amended complaint, instead of as separate lawsuits. It does not decide anything about the merits of the claims.
What the Complaint Alleges
The allegations below come from the complaint in No. 1:26-cv-25575, which was brought on behalf of a South Carolina resident who financed a Lennar-built home through Lennar Mortgage. The complaint says Lennar collected names, addresses and contact information, government identification numbers, driver’s license numbers, Social Security numbers, dates of birth and financial account information from customers and employees, and was obligated to protect it.It alleges, on information and belief, that Lennar did not adequately train employees to recognize phishing, social engineering and ransomware attacks; did not run simulated phishing tests; lacked advanced email security with phishing detection, real-time link and attachment scanning, zero-trust network architecture and endpoint detection and response tools; did not adequately monitor its systems or encrypt sensitive data; and was slow to detect and contain the intrusion. It also alleges that Lennar kept personal information longer than it needed to, which the complaint says widened the breach, and that the stolen information was published on the dark web.
The plaintiff says that since the breach someone accessed or tried to access at least one of her accounts, fraudulent transactions were attempted in her name, and she has received more spam calls and text messages. The Lennar Mortgage notice, as reported by HousingWire, says the company is not aware of any misuse of the information. None of the complaint’s allegations has been tested in court.
Proposed Class, Legal Claims and Relief Sought
The complaint in No. 1:26-cv-25575 proposes a nationwide class of “all persons residing in the United States whose Sensitive Private Information was accessed, exfiltrated, or otherwise compromised in the Lennar data breach that occurred in or around 2026.” Lennar itself, companies it controls, its officers, directors and employees, and the judge assigned to the case and the judge’s immediate family are excluded.It brings two claims: negligence, and negligence per se based on Section 5 of the Federal Trade Commission Act, which the complaint says required Lennar to use reasonable measures to protect personal information. It asks the court to certify the class; declare that Lennar breached its duties; order Lennar to adopt a comprehensive information security program, bring in independent security auditors, train employees on phishing and ransomware, and add the email security, zero-trust and endpoint detection tools the complaint says were missing; award actual, compensatory and nominal damages; order restitution and disgorgement; require notice, remediation and ongoing protective services for affected people; and award attorneys’ fees, costs and interest. It demands a jury trial. Those are requests, not amounts or orders anyone has been granted.
These are the claims in one of the individual complaints. In a consolidated case, the consolidated amended complaint generally becomes the operative pleading, and it may present different claims, class definitions or subclasses than the complaint described here.
What Happens Next
The consolidated case proceeds on the consolidated amended complaint, which plaintiffs were given until September 23, 2026 to file. Lennar and Lennar Mortgage were given a date in October 2026 to respond. In data breach class actions, a defendant’s first response is commonly a motion to dismiss, often arguing that the plaintiffs have not shown a concrete injury or a legal duty, and the court then decides which claims, if any, can go forward.The court has twice declined motions to appoint interim co-lead counsel, on August 24 and, without prejudice, on September 2. Class certification, if it happens, would come later in the case. A settlement, if one were ever reached, would need court approval and notice to class members before any claim process could open. Lennar has not admitted wrongdoing, and there is nothing to file in the case now.
The identity monitoring offered with the Lennar Mortgage notice is separate from the lawsuits. HousingWire reported that enrollment in it is open through November 20, 2026.
Questions
Is there a Lennar data breach settlement or claim form?
There is no settlement and no claim form. The Lennar and Lennar Mortgage data breach lawsuits are at the pleading stage in the U.S. District Court for the Southern District of Florida, no class has been certified, and there is nothing to file in the case.
What information was involved in the Lennar data breach?
Lennar’s public notice, as quoted in a complaint filed August 17, 2026, lists names, contact information, dates of birth, Social Security numbers, passport or other government ID information, driver’s license or other state ID information, and financial account information. HousingWire reported that the Lennar Mortgage notice also says a very small number of people may have had medical-related information involved, and that not every person was affected by every category.
How many people were affected by the Lennar data breach?
A national total has not been confirmed. One state figure has been reported: 60,526 Texas residents on the Texas attorney general’s breach listing, according to HousingWire. Each covers only that state’s residents.
Was the Lennar breach one incident or two?
The lawsuits describe two. A complaint filed August 17, 2026 alleges one intrusion around March 2026 and a second between May and June 2026. A Lennar spokesperson told HousingWire the company identified two separate social engineering-based cybersecurity events, which it believes are unrelated, one within Lennar and one within Lennar Mortgage.
Why were the Lennar lawsuits consolidated?
The suits make overlapping claims against the same companies in the same court. Chief Judge Cecilia M. Altonaga folded related cases into the lead case, No. 1:26-cv-25518, in orders entered August 26 and September 11, 2026, so the claims proceed as one case on a single consolidated amended complaint rather than as separate lawsuits.
Is the Lennar Mortgage identity monitoring offer part of the lawsuit?
The identity monitoring is separate from the class actions. HousingWire reported that Lennar Mortgage hired Kroll to provide two years of complimentary identity monitoring to affected individuals, with enrollment open through November 20, 2026. It was offered with the company’s breach notice, not as part of any court case or settlement.
Sources
• Ramkissoon v. Lennar Corporation, No. 1:26-cv-25518 (S.D. Fla.), lead consolidated case — CourtListener docket• Class action complaint, No. 1:26-cv-25575 (S.D. Fla., filed August 17, 2026) — CourtListener
• HousingWire — “Lennar Mortgage discloses data security incident” (August 18, 2026)
