Did 9Wintrust Mortgage have a data breach?

Answer

Yes. 9Wintrust Mortgage reported a data breach to the Indiana Attorney General on February 18, 2026.

What the filing says

Reported to: Indiana Attorney General
Filing date: February 18, 2026
Breach date: January 7, 2026
People affected: Not stated in the filing

Information involved

Full Name
Social Security Number
Date of Birth
Financial Account Number
Routing Number
Tax Return Information
Credit Score Information
Employment and Wage History
Mailing Address

In plain terms

9Wintrust Mortgage filed notice in Indiana regarding a data breach that occurred on January 7, 2026. The incident exposed sensitive personal and financial details, prompting individuals to take steps to protect against potential identity theft.

9Wintrust Mortgage, a financial institution operating in Indiana, publicly reported a data breach on February 18, 2026. The incident, which originated on January 7, 2026, is currently under monitoring as part of an ongoing investigation.

Based on the company's public filings, the breach exposed a broad range of personal and financial information. This sensitive data includes Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax Return Information, Credit Score Information, Employment and Wage History, and Mailing Address.

The exposure of these categories of information carries significant risks for affected individuals. Bad actors could potentially use this data to commit identity theft, attempt fraudulent financial transactions, or gain unauthorized access to existing accounts. There is also a risk of fraudulent tax returns being filed or new lines of credit being opened in victims' names.

Individuals who believe they may be affected by this breach should immediately review all financial statements and credit reports for any suspicious or unauthorized activity. It is also advisable to consider placing a fraud alert or a security freeze on their credit files with major credit bureaus. Additionally, regularly updating passwords for all online accounts and being vigilant against unsolicited communications requesting personal details are recommended protective measures.

Commonly recommended next steps

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Look up another company

Other breaches reported in Indiana

DataBreachSearch.com reports what was filed with state regulators. It is not legal advice, is not a law firm, and is not affiliated with any government agency or with 9Wintrust Mortgage.