What is the Prosper data breach?
Definition
The Prosper data breach was a 2025 security incident at Prosper Marketplace, a US peer-to-peer lender, that exposed customer data such as names, Social Security numbers and birth dates.
- Category
- Data
- Also called
- Prosper Marketplace breach, Prosper hack
- Last updated
Prosper told customers it discovered unauthorized activity on its systems on September 1, 2025, and reported the incident to law enforcement. Its review of the affected data finished on November 26, 2025. Notices followed in December.
What was exposed
Per Prosper's notice, the data involved included names, Social Security numbers and dates of birth, plus bank account and payment card numbers. Not everyone had the same data exposed, so the letter you receive is the best guide to your own case. Have I Been Pwned, which tracks breaches, lists 17.6 million unique email addresses in it.
What it means for you
A Social Security number and date of birth together are what most identity thieves need to open accounts in your name. You can't change them like a password. The risk lasts for years. Breached details also fuel phishing: a scammer who knows you use Prosper can write a message that looks real.
Prosper said it is offering two years of complimentary credit monitoring and identity restoration through Experian to affected people. Prosper's sample notice also points people to the FTC for guidance on fraud alerts and security freezes. It also covers what to do about identity theft.
Breach vs. identity theft
A data breach is the company-side event: someone gets into stored data. Identity theft is what a criminal may do later with that data. Being in a breach doesn't mean your identity has been stolen, but it raises the odds, so it's worth acting early.
How to protect yourself
- 1
Read your notice and use the monitoring offer
If Prosper wrote to you, follow the letter. That includes the free Experian credit monitoring it offers.
- 2
Freeze your credit
A security freeze stops new accounts being opened in your name. It's free, and you can lift it when you need credit. The FTC explains how to place one at identitytheft.gov.
- 3
Check your credit reports
Look for accounts or inquiries you don't recognize at annualcreditreport.com. Report identity theft at identitytheft.gov.
- 4
Watch for phishing and calls
Don't click links or give details to anyone who contacts you about the breach. Find Prosper's number yourself.
- 5
Shrink what can be matched to you
Scammers pair breach data with public listings of your address and phone number. Serus finds where your personal info is listed and removes it. It also monitors the dark web and breach databases for your data.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
How do I know if I was affected by the Prosper breach?
Prosper sends notices to affected people. You can also enter your email at haveibeenpwned.com to see whether it appears in the breach.
What did Prosper offer affected customers?
Prosper said it is offering two years of free credit monitoring and identity restoration services through Experian.
Can I get my data removed from the breach?
No. Data already stolen can't be pulled back. A credit freeze, monitoring and unique passwords limit the damage.
Sources
Something wrong or out of date? Tell us and we'll re-check it.