Where does the American First Finance case file come from?

Every entry is taken from the breach report American First Finance lodged with the Oregon Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: American First Finance Data Breach

This file collects the dated facts on record for the American First Finance incident. The state report is dated September 12, 2025. The incident itself is dated May 31, 2024.

Timeline

469 days separate the incident date from the date it was reported.

May 31, 2024Incident dateWhen the filing says the breach took place.
September 12, 2025Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state: Oregon
Date reported: September 12, 2025
Incident date: May 31, 2024
Receiving office: Oregon Attorney General

Case notes

On September 12, 2025, American First Finance submitted a data breach notification to the Oregon Attorney General. The filing reports a security incident that the company identified on May 31, 2024, potentially involving the exposure of personal information.

Specific details regarding the types of personal information involved in this incident and the nature of the breach itself were not disclosed in the public filing. American First Finance has indicated that the event remains under active investigation, suggesting an ongoing effort to ascertain its full scope and impact.

Public filings like this are a standard procedure for companies to inform state authorities and potentially affected individuals about security incidents. These disclosures, while sometimes general in nature, serve as an official record and a signal for individuals to take precautionary measures.

Individuals who believe they may be affected by this incident should maintain a heightened awareness for any unusual activity. It is recommended to regularly review statements from financial institutions and exercise caution regarding unsolicited communications asking for personal details.

Consider implementing a fraud alert or security freeze on your credit file with the major credit reporting agencies as a general protective measure. Always refer to any official notifications received directly from American First Finance for the most accurate and specific guidance pertaining to your situation.

Questions about this case file

Where does the American First Finance case file come from?: Every entry is taken from the breach report American First Finance lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Oregon data breaches

Filing source: Oregon Attorney General

Named in the American First Finance breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Oregon case files