American Lending Center americanlendingcenter.com American Lending Center data breach: what happened and what to do
American Lending Center says attackers were in its systems from July 24 to 30, 2025. A filing with the Maine Attorney General lists 123,158 people. Reports say names, dates of birth and Social Security numbers were involved. Notices went out in April 2026.
View all 13,115 breaches- Breach date
- 24 Jul 2025
- Affected
- 123,158
- Data exposed
- Names, Dates of birth, Social security numbers
- Last updated
What happened
American Lending Center is a lender. In July 2025 it was hit by a ransomware attack. According to its filing with the Maine Attorney General, the intrusion ran from July 24 to July 30, 2025, and the company discovered it on July 27.
The notices came much later. The forensic review finished on April 8, 2026 and consumer notices went out on April 28, 2026. That's nine months between the attack and the first letter, which is a long time to not know your data was out.
What was exposed
The Maine filing reports 123,158 people affected in total, 120 of them Maine residents. Security news outlets covering the notice say the data included names, dates of birth and Social Security numbers. Some coverage adds driver's license, passport, tax and loan application details, but that part is less firmly sourced, so check your own letter. Smaller counts on single state lists cover only residents of that state, not the total.
A Social Security number with a date of birth is the core of most identity theft. For a lending customer, loan details also make a phishing call from a fake lender sound real.
What the company did
The company says it found no evidence of misuse. It offers 12 months of credit and CyberScan monitoring, a $1,000,000 identity theft insurance reimbursement policy and identity theft recovery help through IDX. No ransomware group has claimed the attack, according to SecurityWeek.
What to do if you were in it
- 1
Sign up for the free monitoring
Use the enrollment details in your letter. It covers 12 months of credit monitoring and recovery help through IDX.
- 2
Freeze your credit
Freeze your credit at Equifax, Experian and TransUnion. It's free, takes a few minutes online per bureau, and stops anyone opening new credit in your name. You can lift it when you need to apply for something.
- 3
Look at your loan and bank accounts
Check statements and your free credit reports at annualcreditreport.com for accounts or inquiries you didn't make.
- 4
Be skeptical of lender calls
A caller who knows your loan details may be a scammer. Hang up and call your lender on a number you already trust.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data shows up, so you hear about new exposures early. It can't remove data from a breach, so the steps above still matter.
Frequently asked
Was I affected by the American Lending Center breach?
Letters were mailed from April 2026 to people whose data was involved. If you got one, you were. Check the letter for what applies to you.
What was exposed?
Reports say names, dates of birth and Social Security numbers. Some outlets list more, so read your own notice.
How many people were affected?
The Maine Attorney General filing lists 123,158 people.
Should I freeze my credit?
Yes. A Social Security number was involved, and a freeze is free and reversible.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
