American First Finance
bd_2a17aae283cabea6 · schema v1 · pii pii-v1
Full breach record for American First Finance →2 incidents on fileAmerican First Finance (AFF) notified California residents of a data security incident involving its partner, FinWise Bank. On May 31, 2024, a former FinWise employee accessed data after their employment ended. The incident affected AFF's data, specifically customer full names and other personal information. FinWise engaged outside cybersecurity professionals for investigation and is providing 12 months of credit monitoring to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
May 31, 2024
Begins
Sep 12, 2025
Filed
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- Maine State AGbd_204ff99cdd8ddbce2025-09-12Candidate
- Massachusetts State AGbd_aad2aa2ad1a26f012025-09-12Verified
- Oregon State AGbd_ce142ad7c41172ca2025-09-12Verified
- Washington State AGbd_d4e08dc748ec07802025-09-12Verified
Show 5 more filings ↓Show fewer ↑up to 45d gap
- Texas State AGbd_075ea6b96f2d99f12025-09-15 · +3dVerified
- Illinois State AGbd_e152b5591b2fc0882025-09-01 · +11dVerified
- Nebraska State AGbd_372870435e7cee052025-07-29 · +45dVerified
- Delaware State AGbd_926b4460aaecd8042025-07-29 · +45dVerified
- Indiana State AGbd_b34543d57f025cb02025-07-29 · +45dCandidate
Filing propagation · 10 filings · 10 states
View merged incident ↗Pattern: first filing Jul 29 (NE), last Sep 15 (TX) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.