Data Breach · Lawsuits Filed

World Acceptance (World Finance) Sued Over Data Breach That Exposed SSNs

Published October 6, 2026

World Finance borrowers whose information was involved in World Acceptance Corporation’s 2026 data breach may be covered by proposed class actions alleging World Acceptance failed to protect their names, Social Security numbers and driver’s license numbers. No class has been certified and there is nothing to file yet.

Loan paperwork representing World Acceptance Corporation installment loan customers
▼ Allegations Only · No Settlement Yet

This article describes class action complaints. The statements below are unproven allegations. World Acceptance Corporation has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.

What Happened at World Acceptance?

World Acceptance Corporation is a Greenville, South Carolina consumer finance company that makes small and mid-size installment loans and sells related credit insurance through branches operating as World Finance. According to two class action complaints filed against it on October 5, 2026, an unknown party gained unauthorized access to World Acceptance’s network. After investigating, the company determined on or about September 8, 2026 that personal information had been compromised, the complaints say, citing the breach notice World Acceptance filed with the Massachusetts Attorney General’s office.

The two suits, Mitchell v. World Acceptance Corporation, No. 6:26-cv-04453, and Jackson v. World Acceptance Corporation, No. 6:26-cv-04459, were filed the same day in the U.S. District Court for the District of South Carolina, Greenville Division, and are assigned to the same judge. No court has ruled on any of the allegations.

Status Two Complaints Filed October 5, 2026 · D.S.C. · no class certified
Data Exposed Names, Social Security numbers and driver’s license numbers Per both complaints, citing World Acceptance’s Massachusetts breach filing
Can I Claim? No — nothing to claim yet

What the Lawsuits Allege

The Mitchell and Jackson complaints are almost word-for-word the same. The plaintiff in Mitchell lives in Tennessee and the plaintiff in Jackson lives in Texas; each says they gave World Acceptance their personal information to get a loan. The complaints allege that:
The Mitchell plaintiff also says he has seen a sharp increase in spam calls and emails since the breach. World Acceptance has not responded to the complaints in court, and none of the allegations has been tested.

Who Is in the Proposed Class?

Both complaints propose a nationwide class of all individuals residing in the United States whose private information may have been compromised in the data breach. World Acceptance’s officers and directors, entities it controls, and the assigned judge are excluded. The definition is a proposal; a court would have to certify a class before anyone is formally part of the case, and consolidation could change it.

Legal Claims and What the Lawsuits Seek

Each complaint brings three claims: negligence and negligence per se, breach of implied contract, and unjust enrichment. They ask for compensatory damages, a declaratory judgment, and an injunction requiring World Acceptance to disclose the full nature of the breach, improve its data security, and pay for lifetime identity theft protection for everyone affected. Those are requests, not amounts anyone has been awarded.

What Is Still Unknown

Neither complaint states how many people were affected, when the intrusion began, or whether stolen data has been misused, and no nationwide count appears in the official records reviewed for this page. The complaints rely on World Acceptance’s own breach notice for the September 8, 2026 determination date and the types of information involved. Breach notices are filed state by state, so more detail, including counts for individual states, may emerge as filings are posted.

Installment lenders have been a recurring target this year. OneMain Financial faces at least nine federal suits over a May 2026 breach, and NFM Lending was sued after a ransomware group claimed to have stolen mortgage borrowers’ data.

What Happens Next

Two nearly identical suits in the same court before the same judge are commonly consolidated into one case, and more may be filed. World Acceptance would then respond, often with a motion to dismiss. The case could also settle; data breach settlements typically reimburse documented losses, sometimes pay a flat amount, and require a claim form.

There is nothing to file in the lawsuits now. If a settlement is reached, people whose information was involved would normally receive a notice explaining how to file a claim.

Questions

Is there a World Acceptance data breach class action?

Yes. Two proposed class actions, Mitchell v. World Acceptance Corporation and Jackson v. World Acceptance Corporation, were filed on October 5, 2026 in the U.S. District Court for the District of South Carolina. Both are at the complaint stage. No class has been certified, there is no settlement, and there is nothing to claim yet.

What information was exposed in the World Acceptance breach?

Both complaints say the compromised information included names, Social Security numbers and driver’s license numbers. They cite World Acceptance’s data breach notice filed with the Massachusetts Attorney General’s office.

Is World Finance the same company as World Acceptance?

Yes. World Acceptance Corporation, based in Greenville, South Carolina, runs its consumer installment loan branches under the World Finance name. The lawsuits name World Acceptance Corporation as the defendant.

How many people were affected by the World Acceptance data breach?

Neither complaint gives a number, and no nationwide total has been confirmed in the official records reviewed for this page. Companies report breaches state by state, so totals often emerge piece by piece.

What happens next in the World Acceptance lawsuits?

The two cases were filed the same day in the same court, before the same judge, and make nearly identical claims, so they may be consolidated. World Acceptance would then respond, often with a motion to dismiss. If the case settles, people whose information was involved would normally be notified and told how to file a claim.

Sources

• Class Action Complaint, Mitchell v. World Acceptance Corporation, No. 6:26-cv-04453 (D.S.C., filed October 5, 2026): Mitchell complaint (PDF) and docket.
• Class Action Complaint, Jackson v. World Acceptance Corporation, No. 6:26-cv-04459 (D.S.C., filed October 5, 2026): Jackson complaint (PDF) and docket.
• Massachusetts Office of Consumer Affairs and Business Regulation: Data breach notification letters, September 2026 (World Acceptance Corporation, filing 2026-1681, as cited in both complaints).

For more class actions keep scrolling below.
Status Complaints Filed — No Class Certified
Cases Mitchell v. World Acceptance Corporation · Jackson v. World Acceptance Corporation
Case Numbers 6:26-cv-04453 · 6:26-cv-04459
Court U.S. District Court, District of South Carolina (Greenville Division)
Date Filed October 5, 2026

More Data Breach Lawsuits