700Credit data breach exposes personal data of 5.8 million Americans

700Credit, a major US credit-check provider serving thousands of vehicle dealerships, has confirmed a large-scale data breach that exposed the personal information of more than 5.8 million individuals, including Social Security numbers and dates of birth.

The breach occurred over a two-day period in late October 2025. According to regulatory filings and company statements, attackers gained unauthorized access through a partner API with excessive privileges, allowing them to copy sensitive records related to dealership credit checks.

The incident impacted customers of more than 20,000 auto, motorcycle, RV, marine, and powersports dealerships across the United States. The compromised data includes:

• full names and addresses;

• dates of birth;

• Social Security numbers (SSNs).

700Credit announced that official notification letters will begin going out on December 22, alongside an offer of 12 months of free credit monitoring services for affected individuals.

700Credit works closely with the three major US credit bureaus — Equifax, Experian, and TransUnion — and integrates with over 250 third-party platforms, including dealer management systems and compliance tools. This extensive integration ecosystem significantly amplified the impact of the breach.

Privacy experts emphasize that the incident highlights a systemic risk: third-party access chains. When one trusted partner is compromised, attackers can potentially pivot across multiple client environments.

The 700Credit breach underscores how third-party integrations remain a critical weak point even for established financial service providers. For affected individuals, the long-term risk of identity theft and financial fraud is substantial. Continuous credit monitoring and credit freezes are no longer optional safeguards but essential defensive measures.