HackingFinancial ServicesFinanceCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

World Acceptance Corporation

bd_7f0124ddbba2b0ee · schema v1 · pii pii-v2

Severity

High

Discovered

—

Filed

Sep 30, 2026

To disclose

—

Affected

12,646state residents only

Linked

5 filings

Confidence

70%

Full breach record for World Acceptance Corporation →

World Acceptance Corporation notified consumers of a cybersecurity incident where an unknown party gained unauthorized access to its network. The company determined on September 8, 2026, that certain personal information, including Social Security numbers and names, may have been involved. The letter specifically notes that 1 Rhode Island resident was impacted. The company secured its environment, conducted an investigation, and is offering complimentary credit monitoring and fraud assistance services.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Sep 30, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Delaware State AGbd_1181350e6f6b174f2026-09-30Verified
Indiana State AGbd_4f82008bd40dd33f2026-09-30Candidate
Texas State AGbd_7643ad7807802ee82026-10-02 · +2dVerified
Massachusetts State AGbd_02c9d30cb49eef8c2026-09-01 · +29dVerified

Name: World Acceptance Corporation
norm: world acceptance

Name: World Acceptance Corporation
norm: world acceptance
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Sep 8, 2026
Affected individuals: 12,646state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unknown
Threat actor: External

During the incident: Acted quickly to secure our environment
Conducted an investigation into the incident
Reviewed the impacted information
Providing complimentary credit monitoring services
Providing proactive fraud assistance
Changes made: Continually evaluates and modifies our practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: SC CRA notice due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGSep 1 · first

Delaware State AG+29d

Indiana State AG+29d

South Carolina State AG+29d · this page

Texas State AG+31d

Pattern: first filing Sep 1 (MA), last Oct 2 (TX) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2026/Consumer%20Letter%20-%20World%20Acceptance%20Corporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2026
Raw hash: fdaf92487a7342ae8866de57b8154fb28a467d0c6d0a43085ed091f27ab6adf4

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWorld Acceptance Corporation

Victim entityWorld Acceptance Corporation

IncidentUnknown

Stated responseActed quickly to secure our environment

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov