In September 2025, Prosper announced that it had detected unauthorized access to their systems, resulting in the exposure of customer and applicant information. Have I Been Pwned added this breach to its dashboard on October 16, 2025, noting that Prosper advised no evidence of unauthorized access to customer accounts and funds was found, and customer-facing operations were uninterrupted.
The data breach impacted 17.6 million unique email addresses and other specific types of data including US Social Security numbers, browser user agent details, credit status information, dates of birth, email addresses, employment statuses, government issued IDs, income levels, IP addresses, names, and physical addresses. The specific states affected by this breach have not been publicly confirmed.
While the breach occurred in September 2025, further details can emerge at a later date, and notices to affected individuals may be delayed.