Loan information leaked: what it means and what to do

Risk level: high. Can you change it: no. Found in 2 breaches in this directory.

What this data is

Details of loans you hold or applied for: lender, loan type, account number, amount, balance, repayment schedule, arrears and the documents you supplied, such as payslips, bank statements and ID.

The risk on its own

Loan details reveal how much you owe, who you owe it to and whether you have fallen behind. They cannot be used to take money out of an account. Loan applications are among the most document heavy records a company holds, so these breaches often include far more than the loan itself.

The risk combined with other data

With your name, contact details and account number, criminals can pose as your lender with every detail correct, redirect repayments or pitch fake refinancing. If the ID, payslips and bank statements from your application leaked, they form a ready kit for applying for credit in your name elsewhere.

How criminals use it

  • A fake lender email says your repayment account has changed and gives new bank details for your next payment.
  • A caller offers to refinance your exact loan at a lower rate in exchange for an upfront fee.
  • Payslips, bank statements and ID from your application are reused for a loan with another lender.
  • A fake debt collector contacts you about arrears on your real loan and demands payment to a new account.

What to do now

  1. Never change where you send repayments based on an email or call. Confirm with your lender using the number on its official website or your statements.
  2. Place a credit freeze or ban period if application documents or ID leaked.
  3. Log in to your lender's app or website, check the balance and contact details, and turn on two-factor authentication.
  4. Check your credit reports for loans or enquiries you did not make.
  5. Ignore unsolicited refinancing or debt relief offers that require fees upfront.

Frequently asked questions

Can someone take out a loan in my name with this?

If your ID, payslips or bank statements leaked with the loan details, it is possible. A credit freeze is the strongest protection.

My lender says my repayment details have changed. Is that real?

Treat it as a scam until you confirm by calling the lender on a number you look up yourself. Lenders rarely change the account you repay into.

Will the breach change my loan?

No. Your loan terms stay the same. The risk is fraud aimed at you, or new credit applied for in your name.

Breaches that exposed this data

  • HDB Financial Services: 2023-02-22, 1.7M accounts, Dates of birth, Email addresses, Genders, Geographic locations, Loan information, Names
  • MyFHA: 2015-02-18, 973K accounts, Credit status information, Email addresses, Income levels, IP addresses, Loan information, Names

Tools that help

Related guides

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.