|

Lennar Data Breach Lawsuit, Were You Affected?  DiMeglio v. Lennar Corporation, et al., No. 1:26-cv-25575

If you got a letter from Lennar Corporation or Lennar Mortgage about a data breach this August — you weren’t imagining the anxiety. Lennar is now facing DiMeglio v. Lennar Corporation, et al., No. 1:26-cv-25575, a putative class action in the Southern District of Florida claiming two separate 2026 cyberattacks exposed your Social Security number, driver’s license, and financial account information because the company’s data security fell short.

Lennar Data Breach Lawsuit — Key Facts

DetailInformation
Lawsuit FiledAugust 17, 2026
DefendantLennar Corporation and Lennar Mortgage, LLC
Alleged HarmTwo 2026 cyberattacks (March, and May–June) exposing names, addresses, Social Security numbers, driver’s license and passport information, dates of birth, and financial account information
Law AllegedNegligence and negligence per se, the latter tied to Section 5 of the Federal Trade Commission Act
Who Is AffectedA proposed nationwide class of tens of thousands of Lennar and Lennar Mortgage customers and employees
Court & Case NumberU.S. District Court for the Southern District of Florida, Miami Division, Case No. 1:26-cv-25575
Current StageComplaint filed; no ruling or class certification yet
Lead Plaintiff DeadlineNot yet set
Settlement StatusNo settlement — the case is active
Last UpdatedSeptember 9, 2026

Who Is Lennar Corporation and Why Are They Being Sued for the Data Breach?

Lennar Corporation is one of the largest homebuilders in the country, and it runs financing for its buyers through its own mortgage arm, Lennar Mortgage, LLC. Because every buyer who finances through Lennar hands over a Social Security number, driver’s license, and bank details, the company’s systems became a prime hacking target — twice in three months. Lennar Mortgage is named as a co-defendant because the second, larger breach hit its systems directly.

What Did Lennar Corporation Do to Customers Between March and June 2026?

Unauthorized actors broke into Lennar’s computer systems sometime between March 24 and March 30, 2026. Lennar’s own notice to affected customers says the attackers used “sophisticated social engineering tactics” — tricking employees into handing over access, rather than breaking through code. Then, between May 26 and June 1, 2026, a second group did the same thing to Lennar Mortgage’s systems. Lennar didn’t finish assessing what had been taken until July 30, and didn’t start mailing notice letters until August 11 — more than four months after the first breach began.

The lawsuit rests on two negligence-based claims, not any accusation of intentional wrongdoing. Count I says Lennar owed customers a basic duty of reasonable care and didn’t provide it. The complaint lists specific gaps: no simulated phishing tests, no Zero Trust network setup, no endpoint detection systems, and sensitive information kept on file long after Lennar needed it for any legitimate business reason. Count II, negligence per se, argues Lennar violated Section 5 of the Federal Trade Commission Act — the federal law that bars unfair business practices — by failing to use reasonable measures to protect the data it collected.

Four months between discovery and notice is a long wait when the file includes your Social Security number. That’s the gap plaintiffs say gave criminals a head start before anyone even knew to watch their accounts.

Lennar Data Breach Lawsuit, Were You Affected?  DiMeglio v. Lennar Corporation, et al., No. 1:26-cv-25575

Are You Part of the Lennar Corporation Data Breach Lawsuit?

Here’s exactly how to know if the Lennar data breach lawsuit includes you.

  • Customers who financed a Lennar home through Lennar Mortgage, LLC
  • Anyone who received a notice letter from Lennar or Lennar Mortgage about the March or May 2026 breach
  • Former and current Lennar or Lennar Mortgage employees whose Social Security numbers or contact information were on file
  • People whose names, addresses, driver’s license numbers, or financial account details were accessed in either 2026 intrusion

Who does not qualify:

  • Lennar’s own officers, directors, and related companies
  • The judge assigned to the case and their immediate family

Lennar Data Breach Customers Outside Florida — Are You Still Covered?

Yes. This is a putative nationwide class action, filed under the Class Action Fairness Act, not a Florida-only case. It doesn’t matter where you live now — what matters is whether your information was on file with Lennar or Lennar Mortgage when either 2026 breach happened.

Not sure if you qualify for the Lennar data breach lawsuit? A free consultation with a data privacy attorney can help you understand your options while the case moves forward.

If Lennar or Lennar Mortgage already sent you a letter about either breach, you’re very likely already part of this. You don’t need to do anything to be included right now.

What Are Lennar Corporation Customers Asking the Court to Award?

No money yet. No claim form yet.

The lawsuit puts the amount in controversy above $5,000,000 under the Class Action Fairness Act — but that figure covers the whole proposed class, not any single customer’s payout. Beyond damages, DiMeglio is asking the court to order Lennar to build a real information-security program: independent third-party security audits, mandatory phishing and social-engineering training, a Zero Trust network setup, and a hard limit on how long the company can hold onto customer data it no longer needs.

What Could Lennar Corporation Customers Receive If This Settles?

Impossible to predict right now. It depends on how many people join the case, what discovery turns up, and whether the parties reach a settlement at all. Cases like this typically move toward a motion to dismiss or mediation long before any dollar figure gets attached to it.

Not sure what your Lennar data breach claim could be worth down the road? A data privacy attorney can walk you through it as the case develops.

$5 million is the floor stated in the filing for the entire class — not a number tied to your account. Anyone who tells you your specific payout this early isn’t being straight with you.

What Should Lennar Corporation Customers Do Right Now?

  1. Most affected customers are automatically part of the proposed class. There’s nothing to sign up for yet.
  2. Save your notice letter from Lennar or Lennar Mortgage, along with any Kroll identity-monitoring enrollment confirmation.
  3. Watch your accounts and credit reports for anything unfamiliar — new credit inquiries, login attempts you didn’t make, or a jump in spam calls and texts.
  4. Document any losses now, including dates and dollar amounts, in case they matter to your claim later.
  5. There’s no lead plaintiff deadline yet. That will be set once the court schedules its first case management conference.
  6. If your losses are unusually severe, talk to your own attorney about whether pursuing an individual claim makes more sense than staying in the class.

Lennar Data Breach Lawsuit — Full Timeline

MilestoneDate
March Data Breach beginsMarch 24, 2026
Lennar detects the intrusionMarch 30, 2026
May Data Breach begins (Lennar Mortgage)May 26, 2026
Lennar Mortgage detects the intrusionJune 1, 2026
Lennar completes its review of affected dataJuly 30, 2026
Notification letters begin mailingAugust 11, 2026
Lawsuit filed — DiMeglio v. Lennar CorporationAugust 17, 2026
Next scheduled hearingUNVERIFIED — no hearing date published yet
Expected resolutionUNVERIFIED — case was just filed; no timeline set

Lennar Data Breach — Frequently Asked Questions, No. 1:26-cv-25575

Is there a class action lawsuit against Lennar Corporation for the data breach right now?

 Yes, as a putative class action — meaning no class has been certified yet. DiMeglio v. Lennar Corporation, et al., No. 1:26-cv-25575, was filed August 17, 2026, in the U.S. District Court for the Southern District of Florida. It’s one of several suits filed against Lennar since mid-August over the same two breaches.

Do I need to do anything right now to be part of the Lennar lawsuit? 

No. If your information was involved in either the March or May 2026 breach, you’re likely already part of the proposed class automatically. There’s no form to fill out at this stage.

When will the Lennar data breach case settle? 

No one knows yet. The complaint was just filed. Cases like this typically take months, sometimes over a year, before any settlement — if one happens — gets proposed to the court.

Can I file my own lawsuit against Lennar instead of joining the class?

 Yes, though it usually means waiting for the class to be certified and then formally opting out, or pursuing an individual claim now if your losses are serious enough to justify it. Talk to an attorney before deciding.

How will I find out if the Lennar lawsuit settles?

 If a settlement is reached and approved, class members typically get formal notice by mail or email — similar to the notice Lennar already sent about the breach itself.

What does “lead plaintiff” mean for the Lennar case and why does the deadline matter?

 No lead plaintiff deadline has been set in this case yet. When one is, it generally governs who can compete to represent the class and negotiate on its behalf — missing it can mean losing a say in how the case is run.

What specific laws does Lennar allegedly violate? 

The complaint alleges negligence and negligence per se, the second claim tied to Section 5 of the Federal Trade Commission Act, which bars unfair business practices — including, the suit argues, failing to reasonably secure customer data.

How much could Lennar customers get if this case settles? 

There’s no number yet. The complaint states the amount in controversy for the whole class exceeds $5,000,000, but that’s a jurisdictional figure, not a per-person estimate.

Sources Used in This Lennar Corporation Data Breach Article

  • Court Filing — Class Action Complaint, DiMeglio v. Lennar Corporation, et al., No. 1:26-cv-25575 (S.D. Fla.), filed August 17, 2026: Complaint PDF
  • PACER Docket — DiMeglio v. Lennar Corporation et al. (1:26-cv-25575), U.S. District Court, Southern District of Florida: PacerMonitor Docket
  • California Department of Justice, Office of the Attorney General — Lennar Corporation Data Breach Notification Letter: CA DOJ Notice

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the filed class action complaint and Lennar’s official breach notification, on September 9, 2026. Last Updated: September 9, 2026.

This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.

About the Author

Israr Ahmad is a legal content researcher with 4+ years of experience covering class action settlements and consumer rights cases. He has researched and published coverage of 2,500+ settlements using verified court records, settlement administrator filings, and government sources. Learn more about Israr.

Leave a Reply

Your email address will not be published. Required fields are marked *