Prosper Data Breach

What happened?

In September 2025, Prosper announced that it had detected unauthorised access to their systems, which resulted in the exposure of customer and applicant information . The data breach impacted 17.6M unique email addresses, along with other customer information, including US Social Security numbers. Prosper advised that they did not find any evidence of unauthorised access to customer accounts and funds, and that their customer-facing operations were uninterrupted. Further information about the incident is contained in Prosper's FAQs .

When did it happen?

The breach date in the public record is September 1, 2025. The record was added to the catalogue on October 16, 2025 and last updated there on October 16, 2025.

What information was reported as exposed?

• Browser user agent details
• Credit status information
• Dates of birth
• Email addresses
• Employment statuses
• Government issued IDs
• Income levels
• IP addresses
• Names
• Physical addresses

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Prosper or used prosper.com around September 1, 2025. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.