FEDERALHackingFinancial ServicesTechnologyFinanceData ExfiltratedCustomer Data InvolvedDelayed DiscoveryGovernment IDPIIMediumActive

Prosper Marketplace, Inc.

bd_7f95deb36617437b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 1, 2025

Filed

Sep 17, 2025

To disclose

16 days

Affected

Not disclosed

Linked

14 filings

Confidence

67%

Full breach record for Prosper Marketplace, Inc. →3 incidents on file

Prosper Marketplace, Inc. and Prosper Funding LLC reported on September 1, 2025, that an unauthorized third party gained access to systems containing proprietary and confidential information. The Company identified that confidential, proprietary, and personal information, including Social Security numbers, was obtained through unauthorized database queries. The investigation is ongoing, and the Company has yet to determine the full scope or number of affected individuals. No evidence of unauthorized access to customer accounts and funds was found.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 days

Sep 1, 2025

Discovered

Sep 17, 2025

Filed

vs. sector median

6 wks faster

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Indiana State AGbd_064375e1021db3242025-12-09 · +83dVerified
Delaware State AGbd_0e596803e4bc415f2025-12-09 · +83dVerified
California State AGbd_1d8dc2966340fc3f2025-12-09 · +83dVerified
Washington State AGbd_371b15508a6d2c9c2025-12-09 · +83dVerified

Show 6 more filings ↓up to 85d gap

Montana State AGbd_9747b8377985ec6c2025-12-09 · +83dVerified
Nebraska State AGbd_d38f45326410ee322025-12-09 · +83dVerified
Iowa State AGbd_d6c1820c7624a9c42025-12-09 · +83dVerified
Nebraska State AGbd_d7d33fc3f88c47e62025-12-09 · +83dVerified
Texas State AGbd_a95dd486a1b3cf8d2025-12-10 · +84dVerified
South Carolina State AGbd_7e60fb558f4916482025-12-11 · +85dVerified

Showing first 10 of 13 linked disclosures.

Name: Prosper Marketplace, Inc.
norm: prosper marketplace
SEC CIK: 0001416265
Domain: prosper.com

Name: Prosper Marketplace, Inc.
norm: prosper marketplace
SEC CIK: 0001416265
Domain: prosper.com
Industry: Financial ServicesllmTechnologyllm

Discovered: Sep 1, 2025
Materiality determined: Sep 17, 2025
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External

During the incident: Initiated its cybersecurity response plans
Began taking steps to investigate, contain, and remediate the incident and enhance its security measures with the assistance of cybersecurity experts
Informed law enforcement
Changes made: Enhance its security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

SEC 8-KSep 17 · first · this page

Indiana State AG+83d

Delaware State AG+83d

California State AG+83d

Washington State AG+83d

Montana State AG+83d

Nebraska State AG+83d

Iowa State AG+83d

Nebraska State AG+83d

Texas State AG+84d

South Carolina State AG+85d

Pattern: first filing Sep 17, last Dec 11 (SC) — a 85-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1416265/000141626525000038/prosper-20250901.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Sep 17, 2025
Raw hash: 2c7eecf6491b20363705d2edd1ffeefaa85d506b7b9cb20e5ef4bf82b3865780

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html30.8 KB

Download View at source

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityProsper Marketplace, Inc.

Victim entityProsper Marketplace, Inc.

Incidentdiscovered Sep 1, 2025

Stated responseInitiated its cybersecurity response plans

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing