Affirm, a fintech software platform that provides services to online retail shoppers to buy now pay later and lending and consumer credit, was slapped with a class action for allegedly failing to protect the personally identifiable information of its users from a cyberattack on its banking partner, Evolve Bank & Trust.

Morgan & Morgan filed a complaint Wednesday against the San Francisco-based company in the U.S. District Court for the Northern District of California. According to the suit, Evolve confirmed on June 25 that it had been breached by a “known cybercriminal organization” that published its clients’ data on the dark web.