Cyberattack on U.S. Lender Check City Exposes Financial Data of More Than 320,000 Customers

Check City is a U.S. provider of payday loans and other short-term lending services that holds borrowers’ identity-verification, payment and credit information. If stolen, such highly sensitive data could be used for identity theft, fraud or unauthorized transactions. The breach also highlights the cybersecurity and compliance risks financial-services companies face when storing customer data centrally.

Check City confirmed that its systems were attacked in March 2025 and notified 322,687 affected individuals. The exposed data included Social Security numbers, government-issued identification information and credit card numbers. The Clop ransomware group has claimed responsibility, but the company has not disclosed any ransom demand, payment amount or more precise date of intrusion.