This notice traces back to a security incident at FinWise Bank, the lender that partners with American First Finance (AFF) to offer installment loans, lease-to-own accounts, and retail installment sales agreements. According to the letter, on May 31, 2024, a former FinWise employee accessed FinWise data after their employment had already ended. Because AFF acts as FinWise’s technology provider — handling the loan application platform and servicing loans on FinWise’s behalf — some of the data involved in the incident belonged to AFF customers. FinWise says it launched an investigation with outside cybersecurity professionals, and a forensic review and manual document review later determined that files containing personal information may have been accessed or acquired.
