- Peer-to-peer lending platform Prosper has been hit by a data breach
- 17.6 million people are believed to be affected by the breach
- Affected information includes social security numbers, addresses, and income levels.
More than 17.6 million people have reportedly had their personally identifiable information (PII) compromised by hackers after peer-to-peer lending service Prosper was the target of a major cyberattack.
As revealed by notification site Have I Been Pwned, the breach was first revealed in September 2025, when Prosper confirmed that it had discovered unauthorized activity on its systems.
This led to the exposure of PII, including but not limited to social security numbers, IP addresses, physical addresses, government-issued IDs, income levels, and email addresses.
Unauthorized access
As always, those affected in this incident are at risk of identity theft, as criminals can take advantage of their personal data to obtain loans or credit cards in their name. However, with a breach involving information such as IDs, addresses, employment statuses, and income levels, they could also be at risk of incredibly sophisticated social engineering attacks, fraud, or even physical theft.
TechRadar Pro has reached out to Prosper to try to confirm the validity of the 17.6 million figure, but we have not yet received a response. The figure, while definitely significant, is nowhere near the top of the charts: several recent incidents claim to affect over a billion records.
The company has confirmed that it will offer free credit monitoring “as appropriate” once it determines what data was affected, and will monitor accounts with security measures to protect customer funds.
The company has assured customers that their financial accounts were not accessed and that it is fully cooperating with authorities as it investigates the incident.
“There is no evidence of unauthorized access to customer accounts and funds, and our customer-facing operations continue uninterrupted. We continually monitor accounts and have strong safeguards in place to protect customer funds,” the company confirmed on its dedicated FAQ page.
“While these attacks are becoming increasingly common in many industries, we have a variety of measures and technologies in place to prevent these types of incidents. We are improving monitoring of our systems and have implemented enhanced security controls to reduce the likelihood of this happening again in the future.”
Follow TechRadar on Google News and add us as a preferred source to receive news, reviews and opinions from our experts in your feeds. Be sure to click the Follow button!
And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp also.