HackingIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

Prosper

bd_7e60fb558f491648 · schema v1 · pii pii-v1

Prosper Marketplace, Inc. disclosed a cybersecurity event discovered on September 1, 2025, involving unauthorized database queries between June and August 2025 that obtained customer and applicant personal information. No unauthorized access to customer accounts or funds occurred. Prosper reported the incident to law enforcement, engaged a cybersecurity firm, and is offering two years of complimentary credit monitoring and identity restoration services via Experian to affected individuals.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_0e596803e4bc415fDelaware State AGfiled 2025-12-09(2d gap)Verified
bd_1d8dc2966340fc3fCalifornia State AGfiled 2025-12-09(2d gap)Candidate

Source provenance

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/Consumer%20Letter%20-%20Prosper%20Marketplace%2C%20Inc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 11, 2025
Raw hash: 8366a5f82740c3b9e31d5a22b540a989941015e37af736d3a258e47a51b35f52

Reporting entity

Name: Prosper
norm: prosper
Domain: prosper.com

Victim entity

Name: Prosper
norm: prosper
Domain: prosper.com

Incident

Discovered: Sep 1, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: reported the incident to law enforcement
Initial access: valid_credentials

Compliance

Time to disclose: 14 weeks(101 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.