Academy Mortgage Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Academy Mortgage Corporation regarding its recent data breach. According to claims made by a ransomware group, the Academy Mortgage data breach involved sensitive personal information belonging to an undetermined number of individuals.


Academy Mortgage is a mortgage lender offering a variety of financial services. Accordingly, Academy Mortgage specializes in conventional mortgages, adjustable-rate mortgages, jumbo loans, refinancing, and more. Founded in 1988, Academy Mortgage prides itself as one of the United States’ top independent purchase lenders. Headquartered in Draper, Utah, Academy Mortgage operates over 250 branches across the country, and is licensed to process loans in 49 U.S. states and Washington, D.C.


Recently, Academy Mortgage discovered that it had experienced a data breach in which the sensitive personal information in its systems may have been accessed and acquired. On May 14, 2023, a ransomware group posted to their website claiming to have stolen confidential data from Academy Mortgage’s network. While much information surrounding the data breach remains unknown, the ransomware group provided several files as proof of access to Academy Mortgage’s system, including images of drivers’ licenses and internal documents or statements. At present, Academy Mortgage has not responded publicly to the incident.

If you are a current or former client of Academy Mortgage:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Academy Mortgage data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Academy Mortgage;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.


Share This Post: