Prosper
Closing the account does not close the file. Money-laundering and tax rules keep your identity and transaction records for years, and a permission to share your data wherever the law allows covers much of the rest. The holds set by statute are the ones no request can move.
Reported incidents
Social Security numbers and income data taken from its databases
2025-09-02Prosper, a US personal loan platform, disclosed on 2 September 2025 that attackers had run unauthorised queries on its databases and taken "confidential, proprietary, and personal information, including Social Security Numbers". The stolen data also included government ID details, employment and credit status, income, dates of birth and addresses, and later reports added bank account and payment card numbers. Have I Been Pwned counted 17.6 million unique email addresses in it. In December 2025 Prosper put the number of people affected at 13.1 million, with access between June and August 2025. It said it found no sign that customer accounts or funds were reached.
People affected typically ask Prosper to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.