Cyber Incident Victim: American Lending Center
Date:
Jul 2025
Location:
United States of America
Summary
American Lending Center, a California-based non-bank lender with a $3 billion portfolio focused on government-guaranteed small business loans, experienced a ransomware attack that led to unauthorized access of its internal network. The intrusion allowed threat actors to deploy ransomware and view files containing names, dates of birth, Social Security numbers and other personal data of roughly 123,000 individuals. A forensic investigation concluded that the compromised information has not been misused, though no ransomware group has claimed responsibility for the incident. A national class action law firm has launched an investigation into potential legal claims arising from the exposure.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In July 2025, American Lending Center detected a ransomware attack. Between July 24 and July 30, 2025, an unauthorized actor infiltrated the company's computer network, deployed ransomware, and accessed files containing personal identifying information. A forensic investigation was conducted, and the investigation was completed on April 8, 2026. The investigation determined that the threat actor had compromised the internal network and executed the ransomware attack.
Approximately 123,158 individuals were impacted by the breach. The exposed personal data included names, dates of birth, Social Security numbers, and other personal information. American Lending Center notified affected individuals that their names, dates of birth, and Social Security numbers may have been stolen. The company stated that the investigation found no evidence that the potentially compromised information had been misused. No known ransomware group has claimed responsibility for the attack.
Individuals who received the breach notification may be at increased risk of identity theft and fraud. Edelson Lechtzin LLP, a national class action law firm with offices in Pennsylvania and California, is investigating a potential data breach class action lawsuit on behalf of affected individuals. American Lending Center is a California-based private lender established in 2009 that provides small business and investment financing nationwide. The law firm handles class and collective actions involving various matters including data breach litigation.