[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2hvdlfisbt2mq":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":17,"affectedCount":17,"affectedCountStatus":18,"affectedCountLowerBound":19,"affectedCountUnit":20,"hasEnglishDescription":4,"severity":21,"dataClasses":22,"description":27,"seoTitle":28,"seoTitleEn":29,"seoDescription":28,"seoDescriptionEn":30,"logoUrl":31,"isVerified":4,"isSensitive":4,"isSpamList":32,"isMalware":32,"company":33},"6a714be300242480c008737e","AmericanFirstFinance2024","American First Finance 2024 Data Breach","american-first-finance-2024","americanfirstfinance.com","2024-05-31T00:00:00.000Z","2026-08-04T02:18:11.328Z","Third party breach","https:\u002F\u002Fagportal-s3bucket.s3.amazonaws.com\u002Fdatabreach\u002FBreachA34650.pdf",[14,16],"https:\u002F\u002Foag.my.site.com\u002Fdatasecuritybreachreport\u002Fapex\u002FDataSecurityReportsPage",689000,"known",null,"people","High",[23,24,25,26],"Names","Physical addresses","Dates of birth","Social security numbers","\u003Cp>\u003Cstrong>The 2024 American First Finance data breach\u003C\u002Fstrong> involved AFF customer information after a former employee of lending partner FinWise Bank accessed FinWise data after their employment had ended. The Texas Attorney General record reports 689,000 affected people nationwide.\u003C\u002Fp>\u003Cp>American First Finance (AFF) is a financial-technology company providing installment-loan, lease-to-own, and retail installment sales solutions. In the partnership, FinWise was the lender while AFF provided the application platform and loan-servicing functions.\u003C\u002Fp>\u003Ch2>How did the American First Finance data breach happen?\u003C\u002Fh2>\u003Cp>According to FinWise's notice, a former bank employee accessed FinWise data after the employment relationship had ended, beginning on May 31, 2024. The Texas regulator record gives an incident interval of May 31 through June 3, 2024.\u003C\u002Fp>\u003Cp>Some affected files related to AFF customers and applicants. The event was disclosed as former-employee access at partner FinWise, not as a direct intrusion into AFF's own systems.\u003C\u002Fp>\u003Ch2>When was the incident discovered?\u003C\u002Fh2>\u003Cp>The Texas Attorney General record says the incident was discovered on June 18, 2025. Because that was approximately a year after unauthorized access began, the access interval and discovery date are kept separate in the catalog.\u003C\u002Fp>\u003Cp>FinWise conducted a forensic investigation and document review with outside cybersecurity specialists. The review determined that AFF customer information in certain files may have been accessed or acquired.\u003C\u002Fp>\u003Ch2>What information may have been affected?\u003C\u002Fh2>\u003Cp>The Texas regulator record lists names, addresses, dates of birth, and Social Security numbers as the affected data categories.\u003C\u002Fp>\u003Cp>Not every field necessarily applied to every person. The scope may include people who had or applied for a FinWise installment loan, a lease-to-own account through AFF, or a retail installment sales agreement account.\u003C\u002Fp>\u003Ch2>How many people were affected?\u003C\u002Fh2>\u003Cp>The Texas Attorney General reports 689,000 affected people nationwide, including 108,069 Texas residents. The nationwide total and state subset are not added together.\u003C\u002Fp>\u003Ch2>What risks can this information create?\u003C\u002Fh2>\u003Cp>A Social Security number, date of birth, and address can support identity theft, fraudulent credit applications, or scams that imitate a person's existing financing relationship.\u003C\u002Fp>\u003Cp>For an unexpected payment or identity-verification request claiming to come from AFF, FinWise, or a retailer, use the organization's official contact channel instead of following a supplied link. Knowledge of a genuine loan or lease detail does not prove the sender is authorized.\u003C\u002Fp>\u003Ch2>How did the companies respond?\u003C\u002Fh2>\u003Cp>FinWise investigated with outside specialists and began notifying affected people. Notice recipients were offered 12 months of complimentary credit monitoring and identity-theft protection.\u003C\u002Fp>\u003Ch2>What should affected people do?\u003C\u002Fh2>\u003Cp>Notice recipients can enroll in the offered service and monitor credit reports and financial accounts for unfamiliar activity. A fraud alert or credit freeze may be appropriate depending on individual circumstances.\u003C\u002Fp>\u003Cp>If an unfamiliar credit inquiry, new account, or payment appears, contact the relevant financial institution directly. Do not share a password, one-time code, or payment information in response to an unexpected call or message.\u003C\u002Fp>","","American First Finance Data Breach (689 Thousand People Affected)","The American First Finance data breach affected 689,000 people and may have exposed identity information including Social Security numbers.","\u002Fuploads\u002Flogo\u002Famerican-first-finance.png",false,{"name":34,"sector":35,"country":36,"website":37,"websiteArchiveUrl":28,"websiteStatus":28,"websiteCheckedAt":19},"American First Finance","Financial Services","United States","https:\u002F\u002Famericanfirstfinance.com\u002F"]