American First Finance

Disclosed Jul 29, 20251 year ago690,000 affectedConfirmed

What is known

People affected	690,000 (as reported by the organization)
Disclosed	Jul 29, 2025
Discovered	Jun 4, 2024
Happened	May 31, 2024
Attack	Hacking
Data exposed	Names
Sector	Finance · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: American First Financeoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: American First Financeatg.wa.gov · Official notice	Official notice
Notice letter filed with the Delaware DOJ: American First Financeattorneygeneral.delaware.gov · Official notice	Official notice
Oregon DOJ breach notice: American First Financejustice.oregon.gov · Official notice	Official notice
Indiana Attorney General 2025 data breach report: American First Financein.gov · Official notice	Official notice

Where	Filed	People
Delaware DOJresidents of DE	Jul 29, 2025	1,128
Indiana AGresidents of IN	Jul 29, 2025	23,269
California AGresidents of CA	Sep 12, 2025
Washington AGresidents of WA	Sep 12, 2025	4,333
Oregon DOJresidents of OR	Sep 12, 2025	689,000

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Jan 31, 2020Jan 31, 20206 years ago	Jan 31, 20206 years ago	Not stated	Finance	Confirmed	838

History of this record

2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
2026-09-25 · data_types: [] to ["names"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 690000 · backfill source
2026-09-25 · disclosed: 2025-09-12 to 2025-07-29 · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2024-06-04 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.