Find notable cyber news and cases, enriched with sources, timelines, and signals.

FinWise Bank hit by network compromise

Incident
First reported
Last updated
Happening score
H score 7
1 unique sources, 2 articles

Summary

Hide ▲

FinWise Bank disclosed a data security incident in which a former employee accessed data after their employment ended, putting customer information at risk. The breach affected American First Finance customers and involved files containing full names and other personal data elements. The incident was dated to May 31, 2024 and later disclosed in September 2025, with FinWise saying it strengthened controls and offered credit monitoring. The matter also escalated to multiple class-action lawsuits.

Related Happenings

Starbucks hit by network compromise

Incident
First: 13.03.2026 10:16 Last: 13.03.2026 10:16 Sources 1

About this happening: The **Starbucks** account breach exposed employee HR and financial data after an **unauthorized third party** used stolen credentials to access **Partner Central** accounts. The c...

US data compromises reached a record high in 2025 even as victim counts fell

Target Trend
First: 29.01.2026 14:45 Last: 29.01.2026 14:45 Sources 1

About this happening: **US data compromises** remained elevated in **Q3 2025**, with the **Identity Theft Resource Center (ITRC)** tracking **835 separate data compromises** and **around 23 million vic...

Insight Partners hit by ransomware attack

Incident
First: 17.09.2025 20:50 Last: 17.09.2025 20:50 Sources 1

About this happening: The **Insight Partners** breach is a **ransomware incident** that exposed personal and financial information after attackers used **social engineering** to reach its servers. The...

Wealthsimple hit by cyberattack

Incident
First: 05.09.2025 18:36 Last: 05.09.2025 18:36 Sources 1

About this happening: Wealthsimple disclosed a **data breach** that exposed customer personal data and affected **less than 1% of clients**. The company said it detected the incident on **2025-08-30**...

Latest development: 05.09.2025 20:21

Wealthsimple disclosed a data breach after unauthorized access to personal data belonging to less than 1% of clients, said no funds were stolen and passwords were not compromised, notified impacted customers by email, and offered two years of credit monitoring, dark-web monitoring, identity theft protection, and insurance; the company later said the incident is not related to Salesforce.

Timeline

  1. 15.09.2025 21:18 2 articles · 8mo ago

    Former employee accesses FinWise data after employment ends

    Untyped Phase

    A former FinWise Bank employee accessed FinWise data after employment ended on May 31, 2024, exposing sensitive files linked to American First Finance customers.

    Show sources
  2. 15.09.2025 21:18 2 articles · 8mo ago

    FinWise and American First Finance disclose 689,000-customer breach

    Initial Disclosure

    On September 15, 2025, FinWise Bank and American First Finance disclosed to the Maine Attorney General's office that the May 31, 2024 data security incident affected data for 689,000 American First Finance customers, with files containing full names and other personal data elements accessed; FinWise said it launched an investigation with outside cybersecurity professionals, strengthened internal controls, offered 12 months of free credit monitoring and identity theft protection services, and faced multiple class-action lawsuits.

    Show sources