Almeida Law Group is investigating a data breach at World Acceptance Corporation. The breach occurred on August 20th–24th, 2026 and was discovered on September 8th, 2026. If you were affected, contact Almeida Law Group.
About World Acceptance Corporation
World Acceptance Corporation (NASDAQ: WRLD) is a publicly traded small-loan consumer finance company founded in 1962 and formerly known as World Finance. Headquartered at 104 S. Main St. in Greenville, South Carolina, the company offers short-term and medium-term installment loans, related credit insurance, and ancillary products and services to individuals with limited access to traditional consumer credit. It also provides income tax return preparation, electronic filing services, and automobile club memberships. The company operates roughly 1,025 branches across approximately 15 U.S. states, employs around 2,900 people, and reports annual revenue of approximately $536–$565 million. Because World Acceptance collects detailed financial and identity information from loan applicants and customers, a breach exposing names, Social Security numbers, and driver’s license numbers carries a meaningful risk of identity theft and financial fraud for affected individuals.
What Happened?
World Acceptance Corporation was listed in a Texas Attorney General data security breach report (record ID BR-0005385), published on October 2nd, 2026. According to that filing, unauthorized access to company data occurred between August 20th, 2026 and August 24th, 2026 and was discovered on September 8th, 2026. A total of 232,401 individuals were affected. The compromised information included names, Social Security numbers, and driver’s license numbers. World Acceptance notified affected consumers by U.S. Mail, publication in print media, and posting on the company website.
As of the date of research, no independent media coverage, ransomware group claims, or regulatory commentary specific to this breach had been identified. No details about the attack vector or any threat actor involvement have been publicly reported. The Texas Attorney General filing appears to be the first publicly reported data breach for World Acceptance Corporation; the company stated in its May 2024 annual report that it was not aware of any cybersecurity incidents that had materially affected the company prior to this incident. World Acceptance has faced significant regulatory scrutiny in the past—including a $21.7 million FCPA settlement with the SEC, a $16 million shareholder class action settlement in 2017, and a 2024 CFPB supervisory designation order—though none of that prior history involved data security. No class action lawsuits connected to this breach have been filed as of the research date.
Key Facts at a Glance
- Company or Organization: World Acceptance Corporation (NASDAQ: WRLD)
- Industry: Consumer Finance / Credit Services (Financial Services)
- Location: Greenville, South Carolina
- Incident type: Unauthorized access to consumer data
- Date of breach: August 20th, 2026 – August 24th, 2026
- Date breach discovered: September 8th, 2026
- Date of consumer notification: October 2nd, 2026
- Total persons affected: 232,401
- Litigation status: No litigation connected to this breach reported as of research date
- Source: Texas Attorney General Data Security Breach Report – BR-0005385; Yahoo Finance – WRLD Company Profile; Board Cybersecurity – World Acceptance Corp 10-K Cybersecurity Disclosure
What Should You Do?
If you received a notice from World Acceptance Corporation, act promptly to protect yourself. Consider placing a fraud alert or credit freeze with all three major credit bureaus—Equifax, Experian, and TransUnion—to make it harder for someone to open new accounts in your name. Review your credit reports for unfamiliar accounts or inquiries at AnnualCreditReport.com, which offers free reports from each bureau. Because Social Security numbers and driver’s license numbers were exposed, monitor your financial accounts closely for unauthorized activity and be alert to signs of identity theft, such as unexpected bills, collection notices, or IRS correspondence about duplicate tax filings. If you become a victim of identity theft, visit IdentityTheft.gov to report it and get a personalized recovery plan.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
