700Credit Data Breach Impacts 5.8 Million Individuals

700Credit has disclosed a data breach affecting 5,836,521 individuals, with personal information such as names, addresses, dates of birth, and Social Security numbers exposed. The intrusion was identified on 25 October, and involved a compromised third-party API linked to the 700Dealer[.]com application layer, after a partner’s system was breached in July 2025, allowing access to the API and consumer data.

The company states that certain records relating to customers of its dealership clients were copied without authorisation, and that information collected from dealers was downloaded between May 2025 and October 2025 before the attackers were evicted. The firm emphasises that its internal network was not compromised.

Notification to impacted dealership clients began on 21 November, with written notices to affected individuals planned for 22 December, and it has filed a consolidated breach notification with the FTC in collaboration with NADA, while also informing attorney general offices and the FBI. The Maine Attorney General’s office has noted the 5,836,521 figure and that the company is providing 12 months of free credit monitoring and identity restoration services, according to Dana Nessel.