American Lending Heart this week revealed {that a} data breach found final yr has impacted greater than 123,000 people.
American Lending Heart (ALC) is a California-based non-bank lender that manages a $3 billion portfolio specializing in government-guaranteed small enterprise loans.
The group is notifying people affected by the data breach that info comparable to names, dates of beginning, and SSNs might have been stolen in a ransomware assault detected in July 2025.
“By means of a forensic investigation into this breach, it was found that the risk actor compromised inner community, executed a ransomware assault, and accessed sure information that will have contained private figuring out or delicate info,” ALC mentioned in its notification to impacted prospects, a replica of which was submitted to the Maine lawyer basic’s workplace.
The investigation was accomplished on April 8, and ALC has discovered no proof that the possibly compromised info has been misused.
Corporations usually embrace an announcement of their data breach notifications that there isn’t a proof of misuse, even when info has been made public by cybercriminals.
Within the case of ALC, no identified ransomware group seems to have taken credit score for the assault, which might point out both {that a} ransom has been paid or that the monetary establishment has been focused by a cybercrime gang that doesn’t have a public leak web site.
information.killnetswitch has reached out to ALC for clarification and can replace this text if it responds.
