American Lending Center Says Ransomware Breach May Have Exposed 123,000 People’s Data

Summary
American Lending Center says a ransomware attack detected in July 2025 compromised its internal network and may have exposed personal information belonging to more than 123,000 people. The company found no evidence of misuse.
Key points
- ALC said it detected the ransomware attack in July 2025 and that the threat actor compromised its internal network.
- Names, dates of birth, and Social Security numbers may have been in files accessed during the incident.
- More than 123,000 individuals were affected, according to the company’s notification submitted to the Maine attorney general’s office.
- ALC completed its investigation on April 8 and reported no evidence that the potentially compromised information had been misused.
- No known ransomware group had claimed responsibility at the time of the article.
Article Details
- Victim Organization
- American Lending Center (ALC)
- Incident Type
- Data breach involving an internal network compromise and ransomware attack
- Data Types Exposed
- Names
- Dates of birth
- Social Security numbers (SSNs)
- Affected Records
- More than 123,000 individuals
- Affected Data Size
- Unknown
- Operational Impact
- ALC said the threat actor compromised its internal network, executed a ransomware attack, and accessed files that may have contained personal or sensitive information. No other operational disruption was reported.
- Ransom Or Extortion
- No known ransomware group took credit for the attack. The article speculates that a ransom may have been paid, but does not confirm payment or extortion.
- Claim Status
- confirmed
