American Lending Center (ALC) experienced a data breach stemming from a ransomware attack in July 2025. The company discovered the incident on April 28, 2026, and through a forensic investigation that concluded on April 8, 2026, determined that certain files containing personal information were accessed. ALC sent out notifications to affected individuals starting on April 28, 2026, and reported the breach to the Maine Attorney General.
The breach impacted 123,158 individuals and may have exposed sensitive data including names, dates of birth, Social Security numbers, financial information, addresses, payment information, phone numbers, account records, service plans, and payment histories. While Social Security numbers and financial data are confirmed to be involved, the full extent of all data types compromised is still being assessed as various law firms are investigating the incident. ALC is offering complimentary identity theft protection and credit monitoring services via IDX to affected individuals.
Details about data breaches, including specific types of information compromised and the number of individuals affected, can emerge over time as investigations continue. Notice of such events may also be delayed.