Prosper Marketplace Data Breach Expands to 17.6 Million Users

Investigations into the Prosper Marketplace intrusion reveal the compromise has expanded to affect approximately 17.6 million individuals, with sensitive data including names, email addresses, dates of birth, physical addresses, Social Security numbers, and financial records exposed. The intrusion appears to have been a quiet database exfiltration through unauthorized queries rather than encryption or service disruption. Prosper reports no evidence of direct customer funds theft but acknowledges the high risk of synthetic identity fraud and long-term abuse of exposed PII. The incident underscores the unique risk profile of fintech platforms where richly detailed financial and identity attributes accumulate in a single dataset. Breach response priorities include transparent victim notification, extended fraud monitoring, rapid credential rotations, and a forensic review of privileged access and query patterns to determine dwell time and extraction methods.