In 2024, FinWise Bank experienced a data breach involving a former employee who accessed customer data after termination. The incident was disclosed through FinWise's breach notification to affected individuals and reported via the Maine Attorney General's office. The breach affected customers of American First Finance, whose data was stored or processed through FinWise Bank systems.
The breach reportedly affected approximately 689,000 individuals. Exposed data types include names, dates of birth, Social Security numbers, and account numbers, along with other personal information tied to consumer loan and financing records. No medical data was indicated in the available sources.
Details can continue to emerge as investigations progress. Notifications to consumers were referenced as being sent on July 29, 2025.