Financial Firm Hit by Major Cybersecurity Incident, Data of 123,158 Americans Potentially Exposed

The personal information of 123,158 people may have been exposed after a financial services firm suffered a ransomware-related cybersecurity incident.

According to new data from the Maine Attorney General, the American Lending Center reported an external system breach affecting 123,158 individuals, including 120 Maine residents.

The Irvine, California-based financial services firm says the breach occurred between July 24, 2025 and July 30, 2025, and was discovered on July 27, 2025.

According to a notice sent by the firm, American Lending Center launched an investigation after detecting the incident and determined that an unauthorized actor accessed its internal network, deployed ransomware and accessed certain files containing personal information.

The company completed its review of the affected data on April 8, 2026 and began notifying impacted individuals on April 28, 2026.

The potentially exposed information may have included names, dates of birth, Social Security information and other sensitive personal data, with the exact information varying by individual.
American Lending Center says it has implemented additional safeguards and enhanced security measures following the incident.

The firm is offering affected individuals identity theft protection services through IDX, including credit monitoring, CyberScan monitoring, fully managed identity theft recovery services and a $1,000,000 insurance reimbursement policy.

Generated Image: Midjourney