Prosper data breach puts 17 million people at risk of identity theft

Prosper detected unauthorised activity on their systems on 2 September 2025, and later that month published an FAQ addressing the incident. The attacker is said to have stolen personal information, including Social Security numbers, from Prosper customers and loan applicants.

While Prosper did not share the total number of affected people, according to BleepingComputer, the breach affected 17.6 million unique email addresses, with data such as names, government-issued IDs, employment status, credit status, income levels, dates of birth, addresses, IP addresses, and browser user-agent details reportedly exposed. Prosper maintained that no one gained unauthorised access to customer accounts or funds and that customer-facing operations continued without interruption.

The article notes that the stolen data could fuel targeted phishing and even identity theft, and Prosper has promised free credit monitoring after determining what data was affected.