Prosper Notice of Data Breach

Prosper Marketplace, Inc. (“Prosper), a fintech pioneer providing access to affordable financial solutions to consumers across the credit spectrum, today announced that notification letters have been mailed to individuals whose data was impacted in the September 2025 cybersecurity incident.

This notice is intended to provide the same information included in the notification letters to individuals for whom Prosper has insufficient or out-of-date contact information. Prosper previously launched a website to report the incident publicly September 17, 2025.

What happened

On September 1, 2025, Prosper discovered unauthorized activity on our systems. We acted quickly to stop the activity and enhance our security measures, and we began working with a leading cybersecurity firm to investigate what happened. We also reported the incident to law enforcement and offered our full cooperation. However, we did identify evidence that between June and August 2025, data containing personal information was obtained through queries on company databases that store customer and applicant data.

There was no evidence of unauthorized access to customer accounts and funds, and our customer-facing operations continue uninterrupted. Additionally, we continuously monitor accounts, which have strong safeguards in place to protect your fund. However, we did identify evidence that data containing personal information was obtained through queries on company databases that store customer and applicant data.

What Personal Information Was Involved

Prosper’s analysis of the impacted data concluded on November 26, 2025, and identified personal information including: name, Social Security Number / National ID Number, date of birth, bank account number, Prosper account number, other financial / credit application information, driver's license number, marriage or birth certificate, passport number, tax information, payment card number.

What We Are Doing

Prosper is notifying individuals whose personal information was affected as required via email, or letter sent via the U.S. Postal Service, where available. We are offering these individuals two years of complimentary credit monitoring and identity restoration services through our preferred third-party vendor, Experian. The notices provide detailed information about these services, along with instructions for registration and contact details for our dedicated call center established to assist with enrollment and to address any inquiries related to the incident. Prosper began sending individual notifications starting December 9, 2025.

Prior to the incident, Prosper had a number of security measures in place but has taken further steps to deploy additional safeguards onto our systems, including implementing enhanced security and monitoring controls. We remain committed to ongoing information security reviews to strengthen our security and privacy programs and controls.

What You Can Do:

In addition to enrolling in the credit monitoring and identity restoration services being offered to those whose data was impacted at no charge, we encourage you to take the following precautions:

• It is always a good idea to remain vigilant against threats of identity theft or fraud and to regularly review and monitor your account statements and credit history for any signs of unauthorized transactions or activity.
• If you ever suspect that you are the victim of identity theft or fraud, you can contact your local police.

For more information:

Prosper has established a dedicated call center to answer questions about the cybersecurity event as well as the Experian services that we are offering to you. If you have any questions, please call the call center at 1-833-918-9464, from 8 a.m. to 5 p.m. CT Monday through Friday, excluding major U.S. holidays.

About Prosper:

Founded in 2005, Prosper introduced U.S. consumers to an innovative new approach to personal finance called peer-to-peer lending. Over twenty years later, Prosper has helped over 2 million customers achieve financial well-being through a comprehensive suite of products.

Prosper’s flagship personal loan* marketplace continues to offer a unique value for borrowers and investors alike. Home equity loans and lines of credit through Prosper provide homeowners a range of options and choices for tapping into the equity they’ve worked hard to build. The Prosper® Card1 supports people seeking access to credit and flexibility in managing their finances.

Regardless of the product, Prosper is dedicated to meeting people where they are in their financial journey, in order to advance their financial well-being. Learn more at www.prosper.com.

Additional Information for US Residents

Your state Attorney General may also have advice on preventing identity theft, and you should report instances of known or suspected identity theft to law enforcement, your state Attorney General, or the FTC.

California residents: Visit the California Office of Privacy Protection (https://oag.ca.gov/privacy) for additional information on protection against identity theft.

District of Columbia residents: The District of Columbia Attorney General may be contacted at: 400 6th Street, NW, Washington, DC 20001; +1 (202) 727-3400, oag@dc.gov and www.oag.dc.gov.

Iowa residents: The Attorney General can be contacted at the Office of Attorney General of Iowa, Hoover State Office Building, 1305 E. Walnut Street, Des Moines, Iowa 50319; +1 (515) 281-5164, www.iowaattorneygeneral.gov.

Kentucky residents: The Attorney General can be contacted at Office of the Attorney General of Kentucky, 700 Capitol Avenue, Suite 118 Frankfort, Kentucky 40601, www.ag.ky.gov, Telephone: +1 (502) 696-5300.

Maryland residents: The Attorney General can be contacted at Office of Attorney General, 200 St. Paul Place, Baltimore, Maryland 21202; +1 (888) 743-0023 or www.marylandattorneygeneral.gov.

Massachusetts residents: Under Massachusetts law, you have the right to obtain any police report filed in connection with the cybersecurity event. If you are the victim of identity theft, you also have the right to file a police report and obtain a copy of it.

North Carolina residents: The Attorney General can be contacted at 9001 Mail Service Center, Raleigh, NC 27699-9001; +1 (919) 716-6400 or www.ncdoj.gov.

New Mexico residents: You have rights under the federal Fair Credit Reporting Act (FCRA), which governs the collection and use of information pertaining to you by consumer reporting agencies. For more information about your rights under the FCRA, please visit https://www.consumer.ftc.gov/sites/default/files/articles/pdf/pdf-0096-fair-credit-reporting-act.pdf or www.ftc.gov.

New York residents: The Attorney General can be contacted at the Office of the Attorney General, The Capitol, Albany, NY 12224-0341; +1 (800)-771-7755 or www.ag.ny.gov.

Oregon residents: The Attorney General can be contacted at Oregon Department of Justice, 1162 Court Street NE, Salem, OR 97301-4096; +1 (877) 877-9392 (toll-free in Oregon), +1 (503) 378-4400, or www.doj.state.or.us.

Rhode Island residents: The Attorney General can be contacted at 150 South Main Street, Providence, Rhode Island 02903; +1 (401) 274-4400 or www.riag.ri.gov. You may also file a police report by contacting local or state law enforcement agencies.

For Arizona, California, District of Columbia, Iowa, Montana, North Carolina, Washington and West Virginia residents: You may obtain one or more (depending on the state) additional copies of your credit report, free of charge. You must contact each of the credit bureaus directly to obtain such additional report(s).

View source version on businesswire.com: https://www.businesswire.com/news/home/20251209845902/en/