American First Finance Data Breach Lawsuit Investigation
Did you receive a data-breach notice from American First Finance or FinWise Bank? A former bank employee accessed sensitive customer records, putting 689,000 people at risk. Find out how to protect your identity and whether you can seek compensation.
What Happened?
On June 18, 2025, American First Finance, LLC (“AFF”) detected unauthorized access to its consumer database. An investigation found that a former FinWise Bank employee accessed customer records between May 31 – June 3, 2024, after the employee’s termination. The breach was reported to state regulators beginning September 12, 2025.
What Information Was Exposed?
The compromised files contained highly sensitive personally identifiable information (PII):
- Full names
- Social Security numbers
- Dates of birth
- Mailing addresses
- Driver’s license or other government-issued ID numbers
- Financial account details (bank account and routing numbers)
- Medical and other personal financial information
Who Is Affected?
The breach impacts an estimated 689,000 consumers nationwide, including:
- 108,069 residents of Texas
- 208 residents of Maine
- Customers and applicants for FinWise Bank installment loans, AFF lease-to-own plans, or retail installment sales agreements
How Has American First Finance Responded?
AFF is providing 12 months of free credit-monitoring and identity-theft protection to all impacted individuals. Notification letters were mailed beginning July 29, 2025. The company also filed required incident reports with multiple state attorney-general offices.
Your Legal Options
If your personal information was exposed, you may have grounds to:
Seek Monetary Compensation
Class-action investigations are underway. Victims could be reimbursed for:
- Out-of-pocket expenses (credit freezes, notary fees, device replacement)
- Time spent monitoring accounts or correcting fraudulent activity
- Emotional distress and loss of privacy
Strengthen Your Identity Protection
- Enroll in the free credit-monitoring offered by AFF.
- Request a fraud alert or credit freeze with Equifax, Experian and TransUnion.
- Review bank and credit-card statements for unusual charges.
- Never click suspicious links in emails claiming to be from AFF or FinWise Bank.
Frequently Asked Questions
When did American First Finance discover the data breach?
The company detected the breach on June 18, 2025, but the unauthorized access had occurred between May 31 and June 3, 2024.
What should I do if I got an American First Finance breach letter?
Immediately enroll in the free credit-monitoring service, review all financial statements, and consider placing a fraud alert or credit freeze. You may also wish to consult an attorney about your compensation rights.
Is FinWise Bank responsible for the breach?
The breach was carried out by a former FinWise Bank employee who accessed AFF data. Both FinWise Bank and American First Finance are notifying impacted customers.
How many people were affected by the American First Finance data breach?
Approximately 689,000 consumers across the United States had personal data compromised.
Can I join a lawsuit against American First Finance?
Yes. Several class-action investigations are open. Eligibility generally depends on whether your personal data was included in AFF’s notice letter.
Key Takeaways
- A total of 689,000 consumers had sensitive data exposed.
- Data includes SSNs, financial-account numbers, and government-ID details.
- Victims are entitled to 12 months of free credit monitoring.
- Legal action may help you recover financial losses and other damages.