LendingTree lendingtree.com LendingTree data breach 2022: what happened and what to do
LendingTree notified fewer than 70,000 consumers in June 2022 that a code vulnerability exposed their names, Social Security numbers, birthdates and addresses in mid-February 2022.
View all 13,177 breaches- Breach date
- 14 Feb 2022
- Data exposed
- Names, Social security numbers, Dates of birth, Physical addresses
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
LendingTree runs an online marketplace where people compare loan and credit offers. In June 2022 it began mailing notices, dated June 29, to fewer than 70,000 consumers. Reports on the notice say personal information was exposed in mid-February 2022 because of a vulnerability in code. California's Attorney General lists the breach date as February 14, 2022.
Sources checked: consumer.ftc.gov, identitytheft.gov, natlawreview.com
Last verified against the official page:
What was exposed
Reporting on the notice lists names, Social Security numbers, dates of birth and addresses. That combination is the core of identity theft: with it, a criminal can try to open credit or file a tax return in your name. Because the data came from a loan marketplace, you may also see phishing that mentions loans or credit offers.
Why the Social Security number matters
A Social Security number doesn't change, so a leak can matter for years. The FTC's guidance after a breach is to decide what to do based on what was exposed: where a Social Security number is involved, that means a credit freeze and regular checks of your credit reports, rather than only changing a password.
What LendingTree said
The company is reported to have notified affected people by letter. A lawsuit later alleged the notice downplayed the breach; that is an allegation, not a finding.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A credit freeze is free and stops new accounts being opened in your name. Place one with Equifax, Experian and TransUnion, as the FTC explains in its guide to credit freezes and fraud alerts. You can lift it when you need to apply for credit.
- 2
Watch your credit reports and statements
Check your reports for accounts you didn't open. Free reports from all three bureaus are at AnnualCreditReport.com.
- 3
Treat loan offers that mention LendingTree with suspicion
Don't click links in unexpected emails or texts about loans. Go to the company's site yourself, or call a number from your own paperwork.
- 4
Report misuse at IdentityTheft.gov
If someone opens an account or files a return in your name, report it at IdentityTheft.gov. The FTC builds a recovery plan with the steps and letters you need.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see if your email address or phone number shows up in known breaches. Serus can't remove breach data, but it alerts you and tells you what to do.
Official filings
- Washington Attorney General , filed 1 Jul 2022 : 901 people
Timeline
-
The breach happened
-
Reported to the Washington Attorney General
Frequently asked
Was I affected by the LendingTree breach?
LendingTree mailed letters to affected people in June 2022. If you didn't get one, you can contact the company to ask.
What was exposed?
Reports on the notice list names, Social Security numbers, dates of birth and addresses.
Should I freeze my credit?
If your Social Security number was involved, the FTC says a credit freeze is a strong option. It's free at Equifax, Experian and TransUnion.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
