American First Finance data breach
American First Finance reported a data security incident to the Oregon Attorney General on September 12, 2025. This event involved unauthorized access to their systems, potentially exposing personal information. If you received a notification, understanding the implications and your next steps is important.
Docket sheet
- Company
- American First Finance
- Venue
- Oregon Attorney General
- Filed
- September 12, 2025
- People affected
- Not stated
- Status
- Investigation Open
Where this breach stands
- 1
Breach occurredMay 31, 2024
Date of the incident as stated in the filing.
- 2
Reported to the Oregon Attorney GeneralSeptember 12, 2025
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Investigation Open. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Clerk's notes
On September 12, 2025, American First Finance officially reported a data security incident to the Oregon Attorney General. The filing indicates that the financial services company experienced unauthorized access to its systems, an event which was identified on May 31, 2024.
American First Finance provides consumer lending and lease-to-own financing. As part of its operations, it collects and maintains various types of personal information. While the specific categories of data involved in this incident have not been detailed, the company has begun notifying individuals whose data may have been affected.
If you have received a formal data breach notification letter from American First Finance, it signifies that your personal information was likely stored within the impacted systems. It is prudent to carefully review such notifications for any specific guidance provided by the company. Maintaining vigilance over your financial accounts and credit reports is a recommended general precaution.
This incident remains under investigation. Individuals who have received notice of this data security event may have questions regarding their rights and potential next steps. Understanding the implications of such an event can be complex, and a review of your specific situation can help clarify available options.
To learn more about what this data breach may mean for you or to discuss the specifics of your situation, you may consider seeking a free case review. This allows for a confidential assessment of your circumstances without obligation.
If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.
Other Oregon docket entries
- Photon HealthOregon AGOctober 21, 2026Monitoring
- Aldrich Services LLPOregon AGOctober 21, 2026Monitoring
- Roseburg Therapy dba Stronger OregonOregon AGOctober 19, 2026Monitoring
- The City of Mt. AngelOregon AGOctober 13, 2026Monitoring
- Mercadien P.C., CPAsOregon AGOctober 12, 2026Monitoring
- Blueberry PediatricsOregon AGOctober 10, 2026Monitoring
- AllCare Health, Inc.Oregon AGOctober 8, 2026Monitoring
- Hood River DentalOregon AGOctober 8, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.