LENDINGCROWD informed the investors of the security breach that allowed unauthorized access to personal data and issued a warning.
The site and the LendingCrowd platform have not been compromised, the platform stated in a blog post.
The company reported the occurrence on their own initiative to the Information Commissioner's Office that day, and they also informed the Financial Conduct Authority and other pertinent organizations.
Investors were also urged by the platform to use two-factor authentication (2FA), routinely change their passwords, and report any suspicious activity.
Source: https://p2pfinancenews.co.uk/2019/11/04/lendingcrowd-reports-data-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/lendingcrowd
"id": "len4123423",
"linkid": "lendingcrowd",
"type": "Breach",
"date": "11/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Finance',
'name': 'LendingCrowd',
'type': 'Financial Services'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': ['Investors advised to use 2FA, change passwords, and '
'report suspicious activity'],
'data_breach': {'type_of_data_compromised': ['Personal Data']},
'description': 'LendingCrowd informed investors of a security breach that '
'allowed unauthorized access to personal data and issued a '
'warning. The site and platform were not compromised, and the '
'company reported the incident to the Information '
"Commissioner's Office and the Financial Conduct Authority. "
'Investors were advised to use two-factor authentication '
'(2FA), routinely change their passwords, and report any '
'suspicious activity.',
'impact': {'data_compromised': ['Personal Data']},
'recommendations': ['Use two-factor authentication (2FA)',
'Routinely change passwords',
'Report any suspicious activity'],
'regulatory_compliance': {'regulatory_notifications': ['Information '
"Commissioner's Office",
'Financial Conduct '
'Authority']},
'response': {'communication_strategy': ['Informed investors',
'Reported to ICO and FCA'],
'remediation_measures': ['Investors advised to use 2FA, change '
'passwords, and report suspicious '
'activity']},
'title': 'LendingCrowd Security Breach',
'type': 'Data Breach'}