MisusePrivilege AbuseCustomer Data InvolvedIDENTITY_BASICLowContained
American First Finance
bd_2a17aae283cabea6 · schema v1 · pii pii-v1
Full breach record for American First Finance →American First Finance (AFF) notified California residents of a data security incident involving its partner, FinWise Bank. On May 31, 2024, a former FinWise employee accessed data after their employment ended. The incident affected AFF's data, specifically customer full names and other personal information. FinWise engaged outside cybersecurity professionals for investigation and is providing 12 months of credit monitoring to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d4e08dc748ec0780Washington State AGfiled 2025-09-12Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-609846
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 12, 2025
- Raw hash
- 63dd5982010cb07e0773215deff5f0ceb554b0f8618afdbd0ab694aa2c45bf98
Reporting entity
- Name
- American First Financenorm: american first finance
- Domain
- americanfirstfinance.com
Victim entity
- Name
- American First Financenorm: american first finance
- Domain
- americanfirstfinance.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Insider
- Threat actor
- Internal
- Third party
- via FinWise Bank
- Initial access
- insider_action
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.