U.S. fintech and data services firm 700Credit suffered a data breach impacting at least 5.6 million people

According to Security Affairs, a data breach at U.S. fintech and data services company 700Credit exposed the names, addresses, dates of birth, and Social Security numbers of at least 5.6 million people. The Michigan-based firm disclosed an October breach affecting those individuals, with threat actors stealing personal data collected from dealers between May and October 2025.

The firm states the incident was limited to the application layer and did not affect its internal network or operations, and it has notified the impacted dealers and is informing affected consumers. Federal oversight was engaged as the company reported the incident to the FBI and FTC and coordinated regulatory notifications on behalf of dealers, with plans to notify state attorneys general.

Consumers are being offered credit monitoring, and 700Credit urges steps to protect personal information, including watching for phishing and enabling multifactor authentication. The case underscores the company’s commitment to assisting consumers and notifying required parties, while regulators in Michigan have issued consumer alerts following the breach affecting nearly six million people nationwide.