Cyber Finance

MLD Mortgage Inc. (The Money Store): mortgage loan files taken through a service provider's remote-management tool

Checked Oct 22, 2026

If you got an MLD letter, enroll in free IDX identity protection by Jan 15, 2027, review your credit reports and consider a free security freeze.

Who is affected

People whose residential mortgage loan files were held by MLD Mortgage Inc., which does business as The Money Store, and who receive a notice letter. Dependents may also be involved if their names and Social Security numbers were in tax documents given to MLD during the loan process. The Texas Attorney General's breach list showed 1,367 Texans affected as of Oct 22, 2026, and MLD's sample letter posted by California says approximately 43 Rhode Island residents were affected. We found no national total.

What happened

MLD's letter says it identified unusual activity on Sept 9, 2026. Its investigation found that, beginning on or about Sept 8, 2026, an unauthorized third party got into part of its systems "through a remote monitoring and management platform used by a third-party service provider," and "accessed and acquired certain information." MLD says the affected files were residential mortgage loan files with origination, underwriting and closing documents. MLD says it took the affected systems offline, brought in outside cybersecurity specialists and notified federal law enforcement.

• Information involved: the posted sample letter leaves the list of data elements blank. The Texas filing lists name, Social Security number, driver's license number, government ID number, financial account information, medical information and date of birth.

What to do now

• If you get a letter, MLD offers free IDX identity protection (credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy and identity theft recovery services). Enroll at https://app.idx.us/account-creation/protect or by calling 1-866-200-0951, using the enrollment code in your letter. The deadline is Jan 15, 2027.
• If your dependents' information was in tax documents you gave MLD, the letter describes free IDX protection for minors, with the same Jan 15, 2027 deadline.
• MLD's letter recommends reviewing credit reports and account statements, and reporting questionable charges to the bank or company that holds the account.
• The letter says you can place a security freeze at no cost, and that a parent or guardian can place one for a child under 16.
• For questions, the letter lists 1-866-200-0951 (Monday to Friday, 9 a.m. to 9 p.m. Eastern).

Dates

• Event date: unauthorized access began on or about Sept 8, 2026. MLD identified it Sept 9, 2026.
• Notice: letters dated Oct 15, 2026. Reported to the California Attorney General Oct 15, 2026 (per its breach list) and published by the Texas Attorney General Oct 16, 2026. Also on Massachusetts' October 2026 list (letter no. 2026-1802).
• Date checked: Oct 22, 2026.

Sources

1. MLD sample notice letter (PDF), posted by the California Attorney General
2. California Attorney General listing (posting date shown on oag.ca.gov/privacy/databreach/list)
3. Texas Attorney General Data Security Breach Reports (search "MLD")
4. Massachusetts data breach notification letters, October 2026 (letter 2026-1802)