689,000 Affected by Insider Breach at FinWise Bank

According to the Maine Attorney General’s Office, 689,000 individuals were affected by an insider breach at FinWise Bank, with data linked to American First Finance (AFF). The incident involved a former FinWise employee accessing AFF data after their employment ended, and FinWise noted that it is unclear whether the former worker accessed data beyond AFF’s.

The notification sent to impacted individuals indicates they may have had AFF-affiliated loans or agreements such as an installment loan, lease-to-own, or a retail instalment sales agreement account impacted by the security incident, which occurred in May 2024. Affected individuals are being offered 12 months of free credit monitoring and identity theft protection services, suggesting the exposure of sensitive information such as Social Security numbers.

FinWise said it cannot comment further due to pending litigation filed by several of the impacted individuals, and it referenced a recent SEC filing regarding the lawsuits. The article notes that it remains unclear whether the breach was malicious or due to negligence.