Prosper Marketplace

Disclosed Dec 9, 20259 months ago13,076,476 affectedConfirmed

What is known

People affected	13,076,476 (as reported by the organization)
Disclosed	Dec 9, 2025
Discovered	Sep 1, 2025
Happened	Apr 29, 2025
Attack	Hacking
Data exposed	Names, Credentials and tokens, Social Security numbers, Government IDs, Payment cards, Financial, Dates of birth
Sector	Finance · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: Prosper Marketplaceoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: Prosper Marketplaceatg.wa.gov · Official notice	Official notice
Notice letter filed with the Delaware DOJ: Prosper Marketplaceattorneygeneral.delaware.gov · Official notice	Official notice
Oregon DOJ breach notice: Prosper Marketplacejustice.oregon.gov · Official notice	Official notice
Texas Attorney General data security breach report BR-0004717: Prosper Marketplaceoag.my.site.com · Official notice	Official notice
Indiana Attorney General 2025 data breach report: Prosper Marketplacein.gov · Official notice	Official notice

Where	Filed	People
California AGresidents of CA	Dec 9, 2025
Washington AGresidents of WA	Dec 9, 2025	249,848
Delaware DOJresidents of DE	Dec 9, 2025	48,397
Oregon DOJresidents of OR	Dec 9, 2025	13,076,476
Indiana AGresidents of IN	Dec 9, 2025	275,894
Texas AGresidents of TX	Dec 10, 2025	1,161,581

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Nov 26, 2018Nov 26, 20187 years ago	Nov 26, 20187 years ago	Not stated	Finance	Confirmed	3,115

History of this record

2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
2026-09-25 · data_types: ["names","credentials"] to ["names","credentials","ssn","government-id","payment-card","financial","dob"] · backfill source
2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 13076476 · backfill source
2026-09-25 · sector: other to finance · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2025-09-01 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.