Published
October 6, 2026
Updated
October 22, 2026
World Finance borrowers whose information was involved in World Acceptance Corporation’s 2026 data breach may be covered by proposed class actions alleging World Acceptance failed to protect their names, Social Security numbers and driver’s license numbers. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes class action complaints. The statements below are unproven allegations. World Acceptance Corporation has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Happened at World Acceptance?
World Acceptance Corporation is a Greenville, South Carolina consumer finance company that makes small and mid-size installment loans and sells related credit insurance through branches operating as World Finance. According to class action complaints filed against it on October 5 and 6, 2026, an unknown party gained unauthorized access to World Acceptance’s network. After investigating, the company determined on or about September 8, 2026 that personal information had been compromised, the complaints say, citing the breach notice World Acceptance filed with the Massachusetts Attorney General’s office.The two suits, Mitchell v. World Acceptance Corporation, No. 6:26-cv-04453, and Jackson v. World Acceptance Corporation, No. 6:26-cv-04459, were filed the same day in the U.S. District Court for the District of South Carolina, Greenville Division, and are assigned to the same judge. A third suit, Cooper v. World Acceptance Corporation, No. 6:26-cv-04480, followed on October 6 in the same court and was assigned to the same judge. A fourth, Fetes v. World Acceptance Corporation, No. 6:26-cv-04498, was filed October 7, 2026 in the same court’s Greenville Division. No court has ruled on any of the allegations.
More suits followed. Cortez v. World Acceptance Corporation, No. 6:26-cv-04538, was filed October 8 and Hutter v. World Acceptance Corporation, No. 6:26-cv-04799, on October 12, 2026, both in the Greenville Division. Dockets were also opened for Becker v. World Acceptance Corporation, No. 6:26-cv-04489, and Snow v. World Acceptance Corporation, No. 6:26-cv-04497; their complaints were not publicly available for review. The ninth known suit, Baker v. World Acceptance Corporation, No. 6:26-cv-04974, was filed October 20, 2026 and assigned to Judge Jacquelyn D. Austin. Its complaint, filed by a Greenville, South Carolina resident who says he received a breach notice letter dated September 30, 2026, proposes a nationwide class of all persons whose information was impacted by the breach discovered in August 2026 and asserts negligence, negligence per se, unjust enrichment and breach of implied contract. Like the others, those claims are unproven allegations. That makes at least nine lawsuits over the breach in the same court.
World Acceptance’s breach report to the Indiana Attorney General puts the total number of people affected at 232,401, including 7,308 Indiana residents. That listing gives a breach date of August 20, 2026 and a notice date of September 30, 2026; the Hutter and Cortez complaints say the intrusion began on or about August 24, 2026.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
Status
At Least Nine Lawsuits Filed
October 5–20, 2026 · D.S.C. · no class certified
People Affected
232,401
per World Acceptance’s report to the Indiana Attorney General, including 7,308 Indiana residents
Data Exposed
Names, Social Security numbers and driver’s license numbers
Per the complaints, citing World Acceptance’s breach filings with the Massachusetts and Texas Attorneys General
Can I Claim?
No — nothing to claim yet
What the Lawsuits Allege
The Mitchell and Jackson complaints are almost word-for-word the same. The plaintiff in Mitchell lives in Tennessee and the plaintiff in Jackson lives in Texas; each says they gave World Acceptance their personal information to get a loan. The complaints allege that:- World Acceptance required borrowers to hand over sensitive personal information and was responsible for keeping it secure
- The company did not use reasonable safeguards, such as encrypting files, limiting who could reach sensitive data, requiring multi-factor authentication, and logging and alerting on unusual access
- Borrowers now face a long-term risk of identity theft and fraud, because Social Security numbers and driver’s license numbers are hard or impossible to change
- World Acceptance has not fully told affected people how the breach happened or what was taken
The Mitchell plaintiff also says he has seen a sharp increase in spam calls and emails since the breach.
The Cooper complaint was filed on behalf of a Kentucky resident, who says she received a notice letter from World Acceptance telling her that her information was exposed. It describes the intrusion as taking place in August 2026 and says the compromised files held information on thousands of people. World Acceptance has not responded to any of the complaints in court, and none of the allegations has been tested.
The later complaints make similar allegations. The Fetes plaintiff lives in Illinois and pleads negligence, negligence per se, unjust enrichment, breach of implied contract and breach of confidence. The Cortez plaintiff lives in Texas and pleads negligence, breach of implied contract, breach of the implied covenant of good faith and fair dealing, and unjust enrichment. The Hutter plaintiff lives in Illinois, says he received a notice letter dated September 30, 2026 telling him his name and Social Security number were involved, and pleads negligence, breach of implied contract and unjust enrichment.
Who Is in the Proposed Class?
Each complaint reviewed proposes a nationwide class of people in the United States whose information was, or may have been, compromised in the data breach; the Hutter definition expressly includes everyone who was sent a notice letter. The Mitchell and Jackson complaints exclude World Acceptance’s officers and directors, entities it controls, and the assigned judge. The definition is a proposal; a court would have to certify a class before anyone is formally part of the case, and consolidation could change it.Legal Claims and What the Lawsuits Seek
The Mitchell and Jackson complaints each bring three claims: negligence and negligence per se, breach of implied contract, and unjust enrichment. They ask for compensatory damages, a declaratory judgment, and an injunction requiring World Acceptance to disclose the full nature of the breach, improve its data security, and pay for lifetime identity theft protection for everyone affected. The Cooper complaint pleads negligence and unjust enrichment and asks for damages, restitution and court-ordered security measures, including periodic third-party security audits and penetration testing. Those are requests, not amounts anyone has been awarded.What Is Still Unknown
The total is now known from World Acceptance’s Indiana filing, 232,401 people, but how the intruder got in and whether stolen data has been misused are not public, and the sources differ on when the intrusion began (August 20 in the Indiana listing, on or about August 24 in two complaints). The Mitchell and Jackson complaints rely on World Acceptance’s own breach notice for the September 8, 2026 determination date and the types of information involved. Breach notices are filed state by state, so more detail, including counts for individual states, may emerge as filings are posted.Installment lenders have been a recurring target this year. OneMain Financial faces at least nine federal suits over a May 2026 breach, and NFM Lending was sued after a ransomware group claimed to have stolen mortgage borrowers’ data.
What Happens Next
Multiple suits over the same breach in the same court, nine so far here, are commonly consolidated into one case, and more may be filed. World Acceptance would then respond, often with a motion to dismiss. The case could also settle; data breach settlements typically reimburse documented losses, sometimes pay a flat amount, and require a claim form.There is nothing to file in the lawsuits now. If a settlement is reached, people whose information was involved would normally receive a notice explaining how to file a claim.
Questions
Is there a World Acceptance data breach class action?
Yes. At least nine lawsuits against World Acceptance Corporation over the breach have been filed in the U.S. District Court for the District of South Carolina between October 5 and October 20, 2026. Seven complaints reviewed for this page, in Mitchell, Jackson, Cooper, Fetes, Cortez, Hutter and Baker, are proposed class actions; the complaints in Becker and Snow were not publicly available. All are at the complaint stage. No class has been certified, there is no settlement, and there is nothing to claim yet.
What information was exposed in the World Acceptance breach?
The complaints say the compromised information included names, Social Security numbers and driver’s license numbers. The Mitchell and Jackson complaints cite World Acceptance’s data breach notice filed with the Massachusetts Attorney General’s office, and the Hutter complaint cites its report to the Texas Attorney General.
Is World Finance the same company as World Acceptance?
Yes. World Acceptance Corporation, based in Greenville, South Carolina, runs its consumer installment loan branches under the World Finance name. The lawsuits name World Acceptance Corporation as the defendant.
How many people were affected by the World Acceptance data breach?
232,401 people in total, according to the Indiana Attorney General’s data breach report, which lists World Acceptance Corporation with a notice date of September 30, 2026, a breach date of August 20, 2026, 7,308 Indiana residents and 232,401 people overall. The Hutter complaint cites the same figure.
What happens next in the World Acceptance lawsuits?
The cases were filed within a week of each other in the same court, so they may be consolidated. World Acceptance would then respond, often with a motion to dismiss. If the case settles, people whose information was involved would normally be notified and told how to file a claim.
Sources
• Class Action Complaint, Mitchell v. World Acceptance Corporation, No. 6:26-cv-04453 (D.S.C., filed October 5, 2026): Mitchell complaint (PDF) and docket.• Class Action Complaint, Jackson v. World Acceptance Corporation, No. 6:26-cv-04459 (D.S.C., filed October 5, 2026): Jackson complaint (PDF) and docket.
• Class Action Complaint, Cooper v. World Acceptance Corporation, No. 6:26-cv-04480 (D.S.C., filed October 6, 2026): Cooper complaint (PDF) and docket.
• Class Action Complaint, Fetes v. World Acceptance Corporation, No. 6:26-cv-04498 (D.S.C., filed October 7, 2026): Fetes complaint (PDF) and docket.
• Class Action Complaint, Cortez v. World Acceptance Corporation, No. 6:26-cv-04538 (D.S.C., filed October 8, 2026): Cortez complaint (PDF) and docket.
• Class Action Complaint, Hutter v. World Acceptance Corporation, No. 6:26-cv-04799 (D.S.C., filed October 12, 2026): Hutter complaint (PDF) and docket.
• Dockets: Becker v. World Acceptance Corporation, No. 6:26-cv-04489 (docket), and Snow v. World Acceptance Corporation, No. 6:26-cv-04497 (docket), and Baker v. World Acceptance Corporation, No. 6:26-cv-04974, filed October 20, 2026 (docket; Baker complaint (PDF)).
• Indiana Attorney General: Data breach year-to-date report, October 2026 (World Acceptance Corporation entry).
• Massachusetts Office of Consumer Affairs and Business Regulation: Data breach notification letters, September 2026 (World Acceptance Corporation, filing 2026-1681, as cited in the Mitchell and Jackson complaints).
For more class actions keep scrolling below.
Status
Complaints Filed — No Class Certified
Cases
Mitchell · Jackson · Cooper · Becker · Snow · Fetes · Cortez · Hutter · Baker v. World Acceptance Corporation
Case Numbers
6:26-cv-04453 · 04459 · 04480 · 04489 · 04497 · 04498 · 04538 · 04799 · 04974
People Affected
232,401 (Indiana Attorney General report)
Court
U.S. District Court, District of South Carolina (Greenville Division)
Date Filed
October 5–20, 2026
