American Lending Center
Disclosed Apr 28, 20265 months ago123,158 affectedConfirmed
What is known
| People affected | 123,158 (as reported by the organization) |
|---|---|
| Disclosed | Apr 28, 2026 |
| Discovered | Jul 27, 2025 |
| Happened | Jul 24, 2025 |
| Attack | Ransomware |
| Data exposed | Social Security numbers, Government IDs, Health, Payment cards, Financial, Dates of birth, Names, Biometrics |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: American Lending Centeroag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: American Lending Centeratg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: American Lending Centerjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005034: American Lending Centeroag.my.site.com · Official notice | Official notice |
| Vermont Attorney General breach report: American Lending Centerago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: American Lending Centerin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Apr 28 | 1,083 |
| California AGresidents of CA | May 11 | |
| Oregon DOJresidents of OR | May 12 | 123,158 |
| Washington AGresidents of WA | May 13 | 6,049 |
| Vermont AGresidents of VT | May 13 | 41 |
| Texas AGresidents of TX | May 14 | 7,644 |
History of this record
- 2026-09-25 · disclosed: 2026-05-11 to 2026-04-28 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
- 2026-09-25 · data_types: ["ssn","government-id","health","payment-card","financial","dob"] to ["ssn","government-id","health","payment-card","financial","dob","names","biometrics"] · backfill source
- 2026-09-25 · data_types: [] to ["ssn","government-id","health","payment-card","financial","dob"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 123158 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-07-27 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.