What Is This About?

According to dark web monitoring sources, Maryland-based residential mortgage lender NFM Lending, LLC (“NFM”, which also does business as, among others, Main Street Home Loans, BluPrint Home Loans, Element Home Loans, and Homespire Home Loans), may have experienced a data breach allegedly carried out by the threat group known as Interlock. Our firm is investigating this incident and would like to speak with people whose information may be at risk, including anyone who has applied for a mortgage or other loan with NFM or an NFM company.

What Happened?

On or around September 7, 2026, dark web monitoring websites including Ransomware.live detected that the cybercriminal threat group known as Interlock had claimed a breach of NFM Lending’s systems in a post made to Interlock’s dark web leak site. Interlock claims to have stolen more than 2.5 terabytes (2.5 TB) of files, including customer Social Security numbers, financial account information, and more. Employee personal information may also have been compromised in the alleged breach.

As of publication, NFM has not confirmed the alleged breach’s authenticity. Details of the alleged breach, such the full scope of potentially affected information and the number of potentially affected individuals, remain under investigation.

What Information Was Impacted?

While NFM Lending has not confirmed the alleged breach nor its associated details, based on claims made by the Interlock threat group, the following categories of information may have been compromised:

• Names;
• Contact information;
• Social Security numbers;
• Financial/bank account information; and
• Other sensitive personal information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you have ever applied for a loan with NFM Lending, or are a current or former employee, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.