EarnIn, also known as Activehours, Inc., reported a data breach that occurred on April 16, 2025. The incident was disclosed to regulatory bodies in November 2025. This involved the transfer of encrypted personal information of Lead Bank customers to another partner bank. EarnIn stated that it sent notifications to affected individuals, secured the incident, and ensured the recipient bank destroyed the data.
The exposed data types include full names, addresses, dates of birth, and Social Security numbers. At least 21,178 Texas residents and 3,412 Washington residents were affected, totaling at least 24,590 individuals across these two states. The incident involved a financial-services company, but sources do not clearly state whether account numbers or payment-card data were exposed. Medical data was not involved. The exact details of how the breach occurred and the full extent of the data compromise remain unclear.
More information may emerge as investigations continue. Affected individuals received notifications by email, though the content of these letters was not publicly detailed in the provided research.