American First Finance, LLC (AFF)

American First Finance, LLC (AFF), a Texas-based consumer credit company, experienced a cybersecurity incident in which a cybercriminal hacker infiltrated its network and potentially accessed personally identifiable information (PII) of hundreds of thousands of individuals. The breach exposed sensitive customer data, prompting legal investigations by Lynch Carpenter, LLP, a national class action law firm, on behalf of affected individuals. Victims who received breach notifications may be eligible for compensation, indicating significant reputational, financial, and legal repercussions for AFF. The incident underscores vulnerabilities in AFF’s data protection measures, raising concerns over identity theft, fraud, and long-term trust erosion among customers. The scale of the breach—affecting a vast number of records—suggests systemic security failures, with potential regulatory scrutiny and financial penalties looming. Legal firms are actively pursuing claims, signaling severe operational and compliance risks for the company.

Source: https://www.globenewswire.com/news-release/2025/09/15/3150259/0/en/Lynch-Carpenter-Investigates-Claims-in-American-First-Finance-Data-Breach.html

TPRM report: https://www.rankiteo.com/company/americanfirstfinance

"id": "ame4092440091525",
"linkid": "americanfirstfinance",
"type": "Cyber Attack",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Hundreds of thousands of '
                                              'individuals',
                        'industry': 'Financial Services',
                        'location': 'Texas, USA',
                        'name': 'American First Finance, LLC (AFF)',
                        'type': 'Consumer Credit Company'}],
 'customer_advisories': 'Affected individuals encouraged to contact Lynch '
                        'Carpenter, LLP for case review via form submission',
 'data_breach': {'data_exfiltration': 'Possible (records accessed)',
                 'number_of_records_exposed': 'Hundreds of thousands',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2025-09-15',
 'description': 'American First Finance, LLC (AFF), a Texas-based consumer '
                'credit company, announced a cybersecurity incident where a '
                'cybercriminal accessed its network and potentially exposed '
                'personally identifiable information (PII) of hundreds of '
                'thousands of individuals. Lynch Carpenter, LLP is '
                'investigating claims for potential compensation for affected '
                'individuals.',
 'impact': {'brand_reputation_impact': 'Potential negative impact due to '
                                       'exposure of PII',
            'data_compromised': ['Personally Identifiable Information (PII)'],
            'identity_theft_risk': 'High (PII exposed)',
            'legal_liabilities': 'Lynch Carpenter, LLP investigating claims '
                                 'for potential compensation'},
 'investigation_status': 'Ongoing (Lynch Carpenter, LLP investigating claims)',
 'references': [{'date_accessed': '2025-09-15',
                 'source': 'Globe Newswire Press Release'},
                {'source': 'American First Finance About Page',
                 'url': 'https://americanfirstfinance.com/about-us/'},
                {'source': 'Lynch Carpenter LLP',
                 'url': 'https://www.lynchcarpenter.com'}],
 'regulatory_compliance': {'legal_actions': 'Lynch Carpenter, LLP '
                                            'investigating potential class '
                                            'action claims'},
 'response': {'communication_strategy': 'Public disclosure via press release '
                                        '(Globe Newswire); legal firm (Lynch '
                                        'Carpenter, LLP) outreach to affected '
                                        'individuals'},
 'threat_actor': 'Cybercriminal hacker',
 'title': 'American First Finance Data Breach (2025)',
 'type': 'Data Breach'}