Loading story…
FinWise Bank suffered a data breach after a former employee accessed sensitive customer files post-employment, impacting nearly 700,000 American First Finance (AFF) customers. The breach occurred on May 31, 2024, but was only detected on June 18, 2024. FinWise has launched an investigation, strengthened internal controls, and is offering 12 months of free credit monitoring to affected individuals.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A former FinWise Bank employee accessed sensitive data of 689,000 American First Finance (AFF) customers after their employment ended. The breach, discovered on May 31, 2024, compromised personal information tied to consumer loans and financial agreements. FinWise is offering 12 months of free credit monitoring and identity theft protection to affected individuals.
Jun 29, 2026
U.S. courts are increasingly demanding that plaintiffs in data breach lawsuits demonstrate concrete, tangible harm resulting from the exposure of their personal information. Legal experts note that simply having personal data compromised is no longer sufficient grounds for a lawsuit, as judges require clear evidence of out-of-pocket expenses or actual losses due to identity theft or fraud. Emotional distress or the potential for future harm is being viewed as inadequate for establishing injury-in-fact in court. This heightened judicial scrutiny has led to more data breach cases being dismissed, especially as the proliferation of stolen data on the dark web makes it harder for victims to link specific damages to a particular breach. In this legal climate, Utah-based FinWise Bank and American First Finance are facing a consolidated class-action lawsuit following an insider data breach in May 2024 that affected 689,000 individuals. The lawsuit alleges negligence, breach of contract, and unjust enrichment, claiming that FinWise and AFF failed to adequately protect customer information. Plaintiffs are seeking lifetime credit monitoring and over $5 million in relief, despite FinWise already offering one year of complimentary credit and identity protection services. The breach notification process was delayed, with FinWise only beginning notifications in late July after discovering the incident weeks earlier. The legal action against FinWise and AFF reflects a broader trend of victims seeking accountability and compensation in the wake of large-scale data breaches. However, the evolving judicial standards mean that plaintiffs must now provide detailed evidence of direct harm, which can be challenging given the widespread trading of stolen data. The FinWise case is being closely watched as it tests the limits of what constitutes actionable harm in data breach litigation. Legal analysts suggest that the outcome could set important precedents for future class-action suits involving data privacy and cybersecurity incidents. The case also highlights the importance of timely breach notification and robust data protection measures for financial institutions. As courts continue to raise the bar for data breach claims, organizations may face fewer successful lawsuits but greater pressure to demonstrate proactive security and transparent incident response. The ongoing litigation underscores the complex interplay between legal standards, consumer protection, and cybersecurity practices in the financial sector. Both the legal and cybersecurity communities are monitoring the case for its potential impact on future breach-related litigation and regulatory expectations. The situation illustrates the growing challenges for both victims and organizations in navigating the aftermath of significant data breaches under evolving legal frameworks.
Jun 29, 2026
AssuranceAmerica Managing General Agency disclosed a cyber intrusion that exposed the personal and insurance-related data of up to **6,998,886 individuals** after an unauthorized third party compromised an employee account and accessed parts of the company’s internal network. The company said the malicious activity occurred on March 16, 2026, was detected on March 17, and resulted in copied data files containing names, contact details, automobile insurance policy and account information, driver and vehicle information, and claims records. For some affected people, the exposed data may also include **driver’s license numbers**, **Social Security numbers**, and **Tax ID numbers**. AssuranceAmerica said it completed its forensic review on June 15 and began notifying affected individuals in July, after initially reporting a smaller impact before later filings raised the total to nearly 7 million. In response, the insurer took affected servers offline, isolated impacted systems, disabled compromised credentials, reset passwords, expanded monitoring and threat detection, increased employee cybersecurity training, notified law enforcement, and offered two years of identity protection and credit monitoring through IDX. The company also warned customers to watch for phishing attempts and identity-related fraud.
Jul 14, 2026