Find notable cyber news and cases, enriched with sources, timelines, and signals.

700Credit hit by cyberattack

Incident
First reported
Last updated
Happening score
H score 15
3 unique sources, 3 articles

Summary

Hide ▲

700Credit disclosed a breach involving a compromised third-party API tied to its web application, affecting 5,836,521 individuals. Attackers reportedly reached the API through a partner system in July 2025 and copied consumer records from the 700Dealer.com application layer. The exposed information generally included names, addresses, dates of birth, and Social Security numbers. 700Credit said its internal network was not compromised and began notifications on November 21.

Related Happenings

Operation Atlantic approval-phishing takedown

Law Enforcement
First: 13.04.2026 11:00 Last: 13.04.2026 11:00 Sources 1

About this happening: A **UK-led** cross-border operation carried out a **takedown** of **approval phishing** crypto fraud networks, freezing **$12m** and identifying **more than 20,000 victims**. The...

HackerOne employee and dependent data leak after Navia breach

Data Leak
First: 24.03.2026 16:01 Last: 24.03.2026 16:01 Sources 1

About this happening: HackerOne disclosed that **sensitive employee and dependent data** was exposed after attackers accessed **Navia** through a **Broken Object Level Authorization (BOLA) vulnerabilit...

FBI public warning on Signal and WhatsApp phishing

Public Sector Action
First: 20.03.2026 22:45 Last: 20.03.2026 22:45 Sources 1

About this happening: The **FBI** issued a **public service announcement** warning that **Signal** and **WhatsApp** users are being targeted in **phishing campaigns**. The warning says the activity has...

Navia Benefit Solutions data breach exposing benefits records

Data Leak
First: 19.03.2026 22:43 Last: 19.03.2026 22:43 Sources 1

About this happening: **Navia Benefit Solutions** disclosed a **data breach** that exposed sensitive data tied to **nearly 2.7 million individuals**. Attackers had access to its systems from **December...

Navia Benefit Solutions Inc. hit by cyberattack

Incident
First: 19.03.2026 22:43 Last: 19.03.2026 22:43 Sources 1

About this happening: **Navia Benefit Solutions, Inc.** disclosed a **data breach** that exposed sensitive information for **nearly 2.7 million individuals**, after attackers had access to its systems...

Timeline

  1. 15.12.2025 11:21 2 articles · 5mo ago

    700Credit identifies compromised third-party API

    Detection Ioc Update

    700Credit identified a compromised third-party API linked to the 700Credit web application on October 25, indicating unauthorized access to the 700Dealer.com application layer while the internal network remained outside the compromise.

    Show sources
  2. 15.12.2025 11:21 1 articles · 5mo ago

    700Credit begins notifying dealership clients

    Victim Impact Update

    700Credit began notifying impacted dealership clients on November 21 after determining that records tied to dealership customers had been copied without authorization.

    Show sources
  3. 15.12.2025 11:21 3 articles · 5mo ago

    700Credit publicly discloses breach and regulatory notifications

    Initial Disclosure

    700Credit publicly disclosed a breach affecting more than 5.8 million individuals on December 15, said the exposed data generally included names, addresses, dates of birth, and Social Security numbers, and filed breach notifications with the FTC, the Maine Attorney General’s Office, and other attorney general offices while reporting the matter to the FBI.

    Show sources
  4. 15.12.2025 11:21 1 articles · 5mo ago

    700Credit prepares written notices and credit monitoring support

    Victim Impact Update

    700Credit said it would begin sending written notification letters to affected people on December 22 and provide 12 months of free credit monitoring and identity restoration services to the 5,836,521 affected individuals.

    Show sources
  5. 15.12.2025 11:21 2 articles · 5mo ago

    700Credit identifies compromised third-party API

    Detection Ioc Update

    700Credit identified a compromised third-party API linked to the 700Credit web application on October 25, indicating unauthorized access to the 700Dealer.com application layer while the internal network remained outside the compromise.

    Show sources
  6. 15.12.2025 11:21 3 articles · 5mo ago

    700Credit publicly discloses breach and regulatory notifications

    Initial Disclosure

    700Credit publicly disclosed a breach affecting more than 5.8 million individuals on December 15, said the exposed data generally included names, addresses, dates of birth, and Social Security numbers, and filed breach notifications with the FTC, the Maine Attorney General’s Office, and other attorney general offices while reporting the matter to the FBI.

    Show sources