Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Prosper Mortgage Funding, LLC

bd_d7f608554d9eda8f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 15, 2018

Filed

Nov 26, 2018

To disclose

6 weeks

Affected

17state residents only

Confidence

66%

Full breach record for Prosper Mortgage Funding, LLC →

Prosper Funding LLC notified Montana residents of a data breach occurring on or about October 15, 2018. An unauthorized third party gained access to investor personal information, including names, addresses, SSNs, and financial account details, via a phishing campaign that compromised Prosper email accounts. Prosper engaged forensic investigators, notified law enforcement, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 42 days

Oct 15, 2018

Begins

Oct 15, 2018

Discovered

Nov 26, 2018

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed17 affectedView incident

Name: Prosper Mortgage Funding, LLC
norm: prosper mortgage funding
Domain: prosper.com

Name: Prosper Mortgage Funding, LLC
norm: prosper mortgage funding
Domain: prosper.com
Industry: Financial Servicesllm

Discovered: Oct 15, 2018
Breach occurred: Oct 15, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 26, 2018
Affected individuals: 17state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported matter to law enforcement
Initial access: phishing_link

During the incident: Engaged a third-party cybersecurity forensics firm to investigate the issue
Reported this matter to law enforcement
Offered complimentary one-year membership to Experian’s IdentityWorks credit monitoring and identity theft detection services
Changes made: Reviewing security policies and procedures
Implementing additional security measures as appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Prosper-Funding-LLC-Prosper.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2018
Raw hash: b1a3fe3534a5a9f33898772a77994405a4f4006a63a3576df1ddba7b383b243c

Reporting entityProsper Mortgage Funding, LLC

Victim entityProsper Mortgage Funding, LLC

Incidentdiscovered Oct 15, 2018

Stated responseEngaged a third-party cybersecurity forensics firm to investigate the issue

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov