2025-09-17 Prosper Funding LLC Cybersecurity Incident

Page last updated on September 17, 2025

Prosper Funding LLC initially disclosed a cybersecurity incident in an SEC 8-K filing on 2025-09-17 17:09:25 EDT.

Company Summary

Prosper Funding LLC operates a peer-to-peer online lending marketplace platform that connects consumer borrowers seeking unsecured personal loans with individual and institutional investors who can fund those loans via investor notes.

Incident Details

Material: No
Is Breach: No
Records Compromised: Unknown
Data Types Impacted: Unspecified, Social Security Number

Compromised Date: Unknown
Detected Date: Unknown
Disclosure Date: 2025-09-17
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Theft

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2025-09-17

Prosper Funding LLC filed an 8-K at 2025-09-17 17:09:25 EDT
Accession Number: 0001416265-25-000038

Item 8.01 Other Events.

On September 1, 2025, Prosper Marketplace, Inc. (“PMI”) and Prosper Funding LLC (“PFL”, and together with PMI, the “Company”) identified that an unauthorized third party gained access to the Company’s systems that contain proprietary and confidential information. The Company promptly initiated its cybersecurity response plans and began taking steps to investigate, contain, and remediate the incident and enhance its security measures with the assistance of cybersecurity experts. The Company has also informed law enforcement.

There is no evidence of unauthorized access to customer accounts and funds, and the Company’s customer-facing operations continue uninterrupted. As of the date of this filing, the Company has determined that the incident has not had a material impact on its overall business operations, or on PMI and PFL individually.

While the Company’s investigation is ongoing, the Company has evidence that confidential, proprietary, and personal information, including Social Security numbers, was obtained, including through unauthorized queries made on Company databases that store customer and applicant data. The Company is still in the process of identifying what information, including the number of records of personal information, was compromised. The Company will make required regulatory and individual notifications on a rolling basis.

The Company has yet to determine the full scope and impact of the incident and therefore the Company has yet to determine whether the incident is reasonably likely to materially impact its financial condition and results of operations, or PMI and PFL individually.

The Company remains subject to various risks due to the incident, and an increase in the cost to the Company of its insurance policy covering cybersecurity incidents.

Company Information