Weekly Real Estate News
Gold Star Mortgage Financial Group is facing a proposed class action in federal court over an alleged cybersecurity incident, adding the Michigan lender to a growing list of mortgage companies confronting litigation over the protection of borrower and consumer data.
Dana Bryant filed the lawsuit Sept. 25 in the U.S. District Court for the Eastern District of Michigan. The case is Bryant v. Gold Star Mortgage Financial Group Corp., No. 5:26-cv-13662.
The filing of the lawsuit is established by the federal docket. The plaintiff’s allegations about what occurred, what information may have been accessed and Gold Star’s legal responsibility have not been proven in court.
Complaint follows reported cyber incident
The complaint seeks class-action status and alleges Gold Star failed to use reasonable safeguards to protect personal information. A summons was issued after the case was filed.
Separate cybersecurity reporting has attributed claims about the incident to the ransomware group BrainCipher. Those assertions are claims by an alleged threat actor, not findings by a court or federal regulator, and WRE News is not treating them as established evidence that particular files were stolen or that the scope claimed by the group is accurate.
That distinction is especially important in early-stage breach litigation. Complaints typically contain allegations based on information available to plaintiffs when suit is filed; discovery, forensic investigations and subsequent company or regulatory disclosures can materially change the factual record.
Gold Star has not yet had an opportunity to litigate the merits of the claims reflected in the newly filed case. The docket does not show a final determination that the company violated privacy, consumer-protection or cybersecurity law.
Mortgage companies hold unusually sensitive data
Mortgage lenders collect a broad range of information during origination, including income and employment records, bank information, tax documents, identification data and other material used to underwrite borrowers. That makes lenders and servicers attractive targets for cybercriminals and raises the potential consequences when systems are compromised.
Cyber incidents in mortgage and title operations can also disrupt closings, payment processing and communications among borrowers, lenders and settlement providers even when the ultimate scope of data exposure is not immediately known.
The Gold Star litigation is at the beginning of that process. The filing establishes that a borrower has brought claims in federal court; it does not establish liability or validate every factual assertion in the complaint or in statements attributed to cybercriminals.
What comes next will include service of the complaint, Gold Star’s response and any motion practice over whether the claims can proceed. Additional disclosures from the company, regulators or forensic investigators could also provide a clearer picture of the underlying incident.
