Former FinWise Bank employee breaches data of 689,000 customers
Learn More
FinWise Bank, a Utah-based provider of fintech solutions and banking services, is reporting a data breach that exposed the personal information of 689,000 individuals. T
he incident occurred on May 31, 2024, but remained undetected for over a year until June 18, 2025 when the breach was finally discovered and reported to the authorities
The cause of this security incident was an insider threat involving a former FinWise employee who accessed FinWise data after the end of their employment. The former employee apparently accessed American First Finance (AFF) data.
FinWise contracts with AFF to offer installment loans to consumers. FinWise is serving as the lender and AFF as the technology provider.
FinWise redacted the complete list of exposed data types from the breach notification.
FinWise is offering of 12 months of free credit monitoring and identity theft protection services which usually means that sensitive information such as Social Security numbers have been exposed.
FinWise said it cannot comment on the issue, citing pending litigation filed by several of the individuals impacted by the data breach
