MisuseCustomer Data InvolvedIDENTITY_BASICLow
American First Finance
bd_204ff99cdd8ddbce · schema v1 · pii pii-v1
Full breach record for American First Finance →American First Finance, LLC, a financial services company, reported a data breach impacting 208 residents of Maine. The incident, attributed to insider wrongdoing, occurred on May 31, 2024, and was discovered on June 18, 2025. The company notified affected individuals electronically on July 29, 2025, and is offering 24 months of credit monitoring and identity theft protection services through IDX.
Maine clockDiscovered Jun 18, 2025 → Filed with AG Sep 12, 202586d ⏱ ME AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_ce142ad7c41172caOregon State AGfiled 2025-09-12Verified
- bd_075ea6b96f2d99f1Texas State AGfiled 2025-09-15(3d gap)Verified
- bd_926b4460aaecd804Delaware State AGfiled 2025-07-29(45d gap)Verified
- bd_b34543d57f025cb0Indiana State AGfiled 2025-07-29(45d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0a2d6819-6c47-43c1-9825-72f181e7bcdf.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 12, 2025
- Raw hash
- 694d9347d868481afbea3bb8ffe6784843919144fb275437f6653eb5a00a67cd
Reporting entity
- Name
- American First Financenorm: american first finance
- Domain
- americanfirstfinance.com
Victim entity
- Name
- American First Financenorm: american first finance
- Domain
- americanfirstfinance.com
Incident
- Discovered
- Jun 18, 2025
- Materiality determined
- —
- Notification sent
- Jul 29, 2025
- Affected individuals
- 208
- Data types
- IDENTITY_BASIC
- Attack vector
- Insider
- Threat actor
- Internal
Compliance
- Time to disclose
- 12 weeks(86 days from discovery to filing)
- Compliance flags
- ME AG >30d · 86d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 18, 2025→ Filed with AG: Sep 12, 202586d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.