Hackers stole personal information of more than 17.6 million people by breaking into the systems of financial services company Prosper.
Prosper operates as a peer-to-peer loan marketplace that has helped more than 2 million customers secure more than $30 billion in loans since its founding in 2005.
as a company It was revealed a month ago On a dedicated page, the breach was discovered on September 2, but Prosper has yet to find evidence that the attackers had gained access to customer accounts and funds.
However, the attackers stole data belonging to Prosper customers and loan applicants. The company has not shared what information was exposed other than social security numbers as it is still investigating what data was affected.
Prosper said the security breach has not impacted its customer-facing operations and that it has reported the incident to the relevant authorities and is cooperating with law enforcement to investigate the attack.
“We have evidence that confidential, proprietary and personal information, including Social Security numbers, was obtained, including through unauthorized queries made on company databases that store customer information and applicant data. We will offer free credit monitoring as appropriate after determining what data was impacted,” the company says.
“The investigation is still in its early stages, but solving this incident is our top priority and we are committed to sharing additional information with our customers as appropriate.”
Although Prosper did not share how many customers were affected by this data breach, the data breach notification service Am I held hostage reveals the extent of the incident It was reported Thursday that it affected 17.6 million unique email addresses.
The stolen information also included customers’ names, government-issued IDs, employment status, credit status, income levels, dates of birth, physical addresses, IP addresses, and browser user agent details.
When BleepingComputer reached out to Prosper with questions about the incident, a spokesperson said the company was aware of Have I Been Pwned’s report, but was not able to verify it.
A Prosper spokesperson said, “The investigation is ongoing to determine what data was impacted and whose data it belonged to. We will offer free credit monitoring as appropriate once we determine what data was impacted.”
Passwords were cracked in 46% of environments, almost double from 25% last year.
Get the Picus Blue Report 2025 now for a comprehensive look at prevention, detection, and more findings on data intrusion trends.
