Former FinWise employee may have stolen sensitive data on 689,000 American First Finance customers
By Sead Fadilpašić
Copyright techradar
Skip to main content
Tech Radar Pro
Tech Radar Gaming
Close main menu
the business technology experts
België (Nederlands)
Deutschland
North America
US (English)
Australasia
New Zealand
View Profile
Search TechRadar
Expert Insights
Website builders
Web hosting
Best web hosting
Best office chairs
Best website builder
Best antivirus
Expert Insights
Don’t miss these
Major data breach at US credit union sees 172,000 customers at risk – here’s how to stay safe
TransUnion data breach may have affected 4.4 million users – here’s what we know, and how to stay safe
Wealthsimple reveals data breach – users of financial firm warned to be on alert
Staffing giant Manpower hit by major data breach – around 145,000 users affected, here’s what we know
Supermarket giant admits 2.2 million people could be hit by worrying data breach – what to do if you’re affected
Insurance giant Allianz Life says data on over a million US customers stolen in breach – here’s how to stay protected
Major breach sees 100 million data records on citizens leaked – here’s what we know
Major healthcare service breach exposes data on over 600,000 people – names, SSNs, and more stolen, here’s what we know
Nearly 250,000 records leaked in major tax consultancy breach – here’s what we know
Hacker says they were able to download data on all 270,000 Intel employees – from an internal site
Largest US credit union leaked potentially sensitive information
Major breach at medical billing giant sees data on 5.4 million users stolen – here’s what we know
Farmers Insurance data breach sees over a million customers hit – here’s what we know
Massive database containing identity info on 252 million people leaked online – here’s what we know
An apparently “limited” data breach at an Aussie telco giant turned out to have leaked 280,000 customer details
Former FinWise employee may have stolen sensitive data on 689,000 American First Finance customers
Sead Fadilpašić
16 September 2025
A popular bank faces an insider threat
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
(Image credit: Getty Images)
A former FinWise employee accessed sensitive data on 689,000 people more than a year after leaving the company
Victims likely include those with FinWise loans or accounts serviced by American First Finance, its technology partner
FinWise hired security experts, notified authorities, and offered credit monitoring
FinWise Bank, a Utah-based community bank, recently suffered an insider data breach when a former employee accessed sensitive customer data after their employment had ended.
In a new report filed with the Office of the Maine Attorney General, FinWise said that the breach happened on May 31, 2024, but was discovered more than a year later, on June 18, 2025. In total, sensitive data on 689,000 people was compromised.
While the filing does not detail the nature of the stolen files, a data breach notification letter, sent to affected individuals, mentions “full names” and other “data elements”.
You may like
Major data breach at US credit union sees 172,000 customers at risk – here’s how to stay safe
TransUnion data breach may have affected 4.4 million users – here’s what we know, and how to stay safe
Wealthsimple reveals data breach – users of financial firm warned to be on alert
Tricking GPT with a “mock-up” request
The company did not explain exactly how the ex-employee accessed the files.
FinWise did say that the data could be related to American First Finance (AFF), a financial services company that provides alternative consumer financing, especially for people with limited, or poor credit history.
FinWise contracts with AFF to offer installment loans to consumers,” the bank explained. “In this arrangement, FinWise is the lender and AFF is the technology provider. FinWise originates the loan and provides funds to the consumer. AFF is contracted to provide the application platform, facilitate the loan origination for FinWise, as well as service the loan on behalf of FinWise.”
The bank hints that those who have had, or applied for, a FinWise installment loan, a lease-to-own account, or a retail installment sales agreement account, are the likely victims of this incident.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
After finding out about the attack, the bank did what all companies do when faced with a similar thing: brought in third-party security experts to assess the damage and analyze the attack, notified law-enforcement and other relevant authorities, reached out to affected individuals, and offered one year of free credit monitoring and identity theft protection. The name of the vendor was not disclosed.
Via BleepingComputer
You might also like
Insider breaches are a bigger security threat than ever before – here’s how your business can stay safe
Take a look at our guide to the best authenticator app
We’ve rounded up the best password managers
Sead Fadilpašić
Social Links Navigation
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.
Major data breach at US credit union sees 172,000 customers at risk – here’s how to stay safe
TransUnion data breach may have affected 4.4 million users – here’s what we know, and how to stay safe
Wealthsimple reveals data breach – users of financial firm warned to be on alert
Staffing giant Manpower hit by major data breach – around 145,000 users affected, here’s what we know
Supermarket giant admits 2.2 million people could be hit by worrying data breach – what to do if you’re affected
Insurance giant Allianz Life says data on over a million US customers stolen in breach – here’s how to stay protected
Latest in Security
North Korean hackers generate fake South Korean military ID using ChatGPT
Bags of info stolen from multiple top luxury brands – double check your data now
Google confirms hackers created their own account in sensitive law enforcement portal
Chinese malware is flooding GitHub pages – HiddenGh0st, Winos and kkRAT hit devs via SEO poisoning
CISA blasted by US watchdog for wasting funds and retaining the wrong employees
Researchers uncover huge IPTV piracy network spanning 1,000 domains and 10,000 IP addresses – here’s what you need to know
Latest in News
ExpressVPN’s latest update makes using its iPhone VPN even easier – here’s all you need to know
TechRadar Choice Awards 2025: Fitness & Home Tech categories – vote for your winners now!
How to watch Love Island Games season 2 online and for FREE from anywhere
TikTok to be saved in the US as Trump confirms a deal with China ahead of upcoming ban
OpenAI reveals biggest-ever study of how people are using ChatGPT – here are 3 things we’ve learned
TechRadar Choice Awards 2025: TV, Streaming & Audio categories – vote for your winners now!
LATEST ARTICLES
Seagate’s 22TB desktop HDD deal is the best I’ve seen in a while at $10.91/TB – Expansion hard drive is on sale at Seagate for $240 and even includes free data recovery
Researchers warn that skill erosion caused by AI could have a devastating and lasting impact on businesses – but it may already be too late
Top US tech companies are holding developers in closed-source AI ecosystems, Ant Group says
This top-rated MacBook Air is back down to a record-low price at Best Buy
Microsoft 365 Copilot will be automatically installed on 365 Clients in October
TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
Contact Future’s experts
Terms and conditions
Privacy policy
Cookies policy
Advertise with us
Web notifications
Accessibility Statement
Future US, Inc. Full 7th Floor, 130 West 42nd Street,
Please login or signup to comment
Please wait…
