2026 American Lending Center — ransomware; >123k individuals notified (July 2025 incident)
Data compromised
Names, dates of birth, Social Security numbers per state notification summaries
Technical writeup
American Lending Center (ALC), a California non-bank lender focused on government-guaranteed SBA loans, disclosed in May 2026 regulatory notices that a ransomware attack detected in July 2025 compromised its internal network and files that may have held names, dates of birth, and Social Security numbers for more than 123,000 individuals. SecurityWeek and SC Media summarized a Maine attorney-general filing and ALC customer letters stating a forensic investigation concluded 8 April 2026 with no evidence of misuse at that stage—standard cautious language while data may already circulate on criminal markets. No major ransomware group had publicly claimed the incident in indexed trade coverage at catalog time. BreachHistory encodes the regulatory victim denominator rather than unverified terabyte marketing.
Root cause
Ransomware attack with internal network compromise and access to files containing borrower PII per company notification