API breach exposes millions of consumer records.

700Credit says a compromised third‑party API allowed hackers to access personal data belonging to more than 5.8 million people. The attackers breached a partner system months earlier and used the connection to copy records tied to dealership customers between May and October 2025. Stolen information includes names, addresses, birth dates, and Social Security numbers, though the company says its internal network was not affected. 700Credit has notified regulators, law enforcement, and dealerships, and will begin sending letters to impacted individuals while offering a year of credit monitoring and identity restoration services.

Read more:

https://www.securityweek.com/700credit-data-breach-impacts-5-8-million-individuals/