Massive data breach sees credit card details of over 5.6 million victims leaked - here's what we know

• 700Credit lost sensitive data on 5.6 million people after a third‑party API was compromised
• Attackers siphoned ~20% of consumer records over two weeks, including names, addresses, DOBs, and SSNs
• Victims are being notified and offered two years of credit monitoring as regulators and the FBI investigate

Credit check giant 700Credit has suffered a data breach which saw it lose sensitive data on more than 5.6 million people.

In a statement shared with the media, partners, and affected individuals, 700Credit said that in late October 2025, it suffered a third-party supply-chain attack.

The company communicates with more than 200 integration partners through APIs, and when one of the partners was compromised in July, they failed to notify 700Credit - and as a result, unnamed cybercriminals broke into that third-party’s system, and exposed an API used to pull consumer information.