FinWise Bank hit by network compromise
Incident
Summary
Hide ▲
Show ▼
FinWise Bank disclosed a data security incident in which a former employee accessed data after their employment ended, putting customer information at risk. The breach affected American First Finance customers and involved files containing full names and other personal data elements. The incident was dated to May 31, 2024 and later disclosed in September 2025, with FinWise saying it strengthened controls and offered credit monitoring. The matter also escalated to multiple class-action lawsuits.
Related Happenings
Starbucks hit by network compromise
Incident
First: 13.03.2026 10:16
Last: 13.03.2026 10:16
Sources 1
About this happening:
The **Starbucks** account breach exposed employee HR and financial data after an **unauthorized third party** used stolen credentials to access **Partner Central** accounts. The c...
Starbucks hit by network compromise
IncidentAbout this happening: The **Starbucks** account breach exposed employee HR and financial data after an **unauthorized third party** used stolen credentials to access **Partner Central** accounts. The c...
US data compromises reached a record high in 2025 even as victim counts fell
Target Trend
First: 29.01.2026 14:45
Last: 29.01.2026 14:45
Sources 1
About this happening:
**US data compromises** remained elevated in **Q3 2025**, with the **Identity Theft Resource Center (ITRC)** tracking **835 separate data compromises** and **around 23 million vic...
US data compromises reached a record high in 2025 even as victim counts fell
Target TrendAbout this happening: **US data compromises** remained elevated in **Q3 2025**, with the **Identity Theft Resource Center (ITRC)** tracking **835 separate data compromises** and **around 23 million vic...
Insight Partners hit by ransomware attack
Incident
First: 17.09.2025 20:50
Last: 17.09.2025 20:50
Sources 1
About this happening:
The **Insight Partners** breach is a **ransomware incident** that exposed personal and financial information after attackers used **social engineering** to reach its servers. The...
Insight Partners hit by ransomware attack
IncidentAbout this happening: The **Insight Partners** breach is a **ransomware incident** that exposed personal and financial information after attackers used **social engineering** to reach its servers. The...
Wealthsimple hit by cyberattack
Incident
First: 05.09.2025 18:36
Last: 05.09.2025 18:36
Sources 1
About this happening:
Wealthsimple disclosed a **data breach** that exposed customer personal data and affected **less than 1% of clients**. The company said it detected the incident on **2025-08-30**...
Wealthsimple hit by cyberattack
IncidentAbout this happening: Wealthsimple disclosed a **data breach** that exposed customer personal data and affected **less than 1% of clients**. The company said it detected the incident on **2025-08-30**...
Latest development: 05.09.2025 20:21
Wealthsimple disclosed a data breach after unauthorized access to personal data belonging to less than 1% of clients, said no funds were stolen and passwords were not compromised, notified impacted customers by email, and offered two years of credit monitoring, dark-web monitoring, identity theft protection, and insurance; the company later said the incident is not related to Salesforce.
Timeline
-
15.09.2025 21:18 2 articles · 8mo ago
Former employee accesses FinWise data after employment ends
Untyped PhaseA former FinWise Bank employee accessed FinWise data after employment ended on May 31, 2024, exposing sensitive files linked to American First Finance customers.
Show sources
- FinWise insider breach impacts 689K American First Finance customers — www.bleepingcomputer.com — 15.09.2025 21:18
- FinWise data breach shows why encryption is your last defense — www.bleepingcomputer.com — 22.10.2025 18:11
-
15.09.2025 21:18 2 articles · 8mo ago
FinWise and American First Finance disclose 689,000-customer breach
Initial DisclosureOn September 15, 2025, FinWise Bank and American First Finance disclosed to the Maine Attorney General's office that the May 31, 2024 data security incident affected data for 689,000 American First Finance customers, with files containing full names and other personal data elements accessed; FinWise said it launched an investigation with outside cybersecurity professionals, strengthened internal controls, offered 12 months of free credit monitoring and identity theft protection services, and faced multiple class-action lawsuits.
Show sources
- FinWise insider breach impacts 689K American First Finance customers — www.bleepingcomputer.com — 15.09.2025 21:18
- FinWise insider breach impacts 689K American First Finance customers — www.bleepingcomputer.com — 15.09.2025 21:18