HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Prosper
bd_1d8dc2966340fc3f · schema v1 · pii pii-v1
Full breach record for Prosper →Prosper Marketplace, Inc. disclosed a cybersecurity event where unauthorized activity was discovered on September 1, 2025. Investigation revealed that between June and August 2025, personal information was obtained through queries on company databases storing customer and applicant data. The company engaged a cybersecurity firm, notified law enforcement, and is offering two years of credit monitoring and identity restoration services via Experian. Enhanced security controls have been implemented.
California clockDiscovered Sep 1, 2025 → Notified Dec 9, 202599d ✗ CA 60-day late14 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0e596803e4bc415fDelaware State AGfiled 2025-12-09Verified
- bd_7e60fb558f491648South Carolina State AGfiled 2025-12-11(2d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-615331
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 9, 2025
- Raw hash
- 82df50bc089aa039cc038f4ae75fe2ebc0c90c0090827fca13c72c6cd917a727
Reporting entity
- Name
- Prospernorm: prosper
- Domain
- prosper.com
Victim entity
- Name
- Prospernorm: prosper
- Domain
- prosper.com
Incident
- Discovered
- Sep 1, 2025
- Materiality determined
- —
- Notification sent
- Dec 9, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 14 weeks(99 days from discovery to filing)
- Compliance flags
- CA 60-day late · 99d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 1, 2025→ Notified: Dec 9, 202599d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.