700Credit data breach: auto dealers' credit applicants exposed, 5,836,521 people

What happened at 700Credit?

700Credit says it became aware of suspicious activity in its web application on or around October 25, 2025 and brought in forensic specialists. The investigation found that records about its dealership clients' customers had been copied without authorization. It began telling the dealers on November 21, 2025, then hired a notification vendor and got approval to send letters on their behalf. It notified federal law enforcement and the Federal Trade Commission.

Michigan's attorney general, noting that 700Credit is a Michigan-based company, said the company reported that the data had been collected from dealers between May 2025 and October 2025.

Date	What happened	Source
May to October 2025	Period in which the exposed data was collected from dealers	Michigan AG
On or around October 25, 2025	Suspicious activity found in the web application	700Credit filing; Oregon list
October 27, 2025	End of the breach window	Oregon list
November 21, 2025	700Credit starts notifying dealership clients	700Credit filing
December 10, 2025	Michigan AG alert: nearly 6 million people, more than 160,000 in Michigan	Michigan AG
December 12, 2025	Notice date on Oregon's record	Oregon list
On or about December 22, 2025	Letters to 38,716 Nebraska residents begin	700Credit filing

Why did I get a letter from 700Credit?

Because a car dealership you applied to for financing used it. 700Credit says it provides services to dealerships nationwide to help with consumer financing, and the notice goes out on behalf of 700Credit and its dealership clients. The letter may name the dealer. The guide to why you got a breach letter from a company you never dealt with explains vendor notices like this one.

What information was exposed?

Name, address, Social Security number and date of birth. Michigan's attorney general told residents not to ignore the letter and said a credit freeze or monitoring can help prevent fraud.

How many people were affected?

Record	What it counts	Number
Oregon DOJ	All affected	5,836,521
Michigan AG release	Michigan residents	More than 160,000
Nebraska AG filing	Nebraska residents	38,716
Wisconsin DATCP list	All affected	5.6 million
Wisconsin DATCP list	Wisconsin residents	87,947
Indiana AG 2025 report	Total in the notice filed in Indiana	583,652
Indiana AG 2025 report	Indiana residents	87,639
Texas AG	Texas residents	709,406
Washington AG	Washington residents	121,828

Indiana's figure is much lower. Its 2025 report lists 700Credit LLC with notice on December 22, 2025, a breach date of October 25, 2025, 87,639 Indiana residents and 583,652 people in total. The breach date matches the other records, so this is the same incident; the documents fetched here do not say why the total filed in Indiana is about a tenth of the others. On Indiana's number, 700Credit ranks 22nd among the report's 2025 totals, the place it holds in the largest data breaches of 2025.

Texas's attorney general lists a report from 700Credit, LLC, posted on December 16, 2025, with 709,406 Texans affected. The Texas record lists names, addresses, Social Security numbers and dates of birth among the information involved. Texas posted it in 2025, so it is not in the 2026 Texas ranking. The figure counts Texans only.

Is the 700Credit count of 5.6 million or 5.8 million?

Both figures appear on government records, which are dated differently. Wisconsin's consumer protection agency lists 700Credit with an incident date of October 25, 2025 and public notice on November 21, 2025. It records 5.6 million people affected, 87,947 of them in Wisconsin, and names, addresses and Social Security numbers as the data accessed. Oregon's later record has 5,836,521. Michigan's attorney general said nearly 6 million in December 2025. Wisconsin's entry says 700Credit will provide between 12 and 24 months of identity and credit monitoring, and gives the help line 833-586-1820. TechCrunch, reporting the Wisconsin figure on December 12, 2025, described 700Credit as a company that runs credit checks and identity verification for auto dealerships across the United States.

What is 700Credit offering?

Twelve months of credit monitoring through Cyberscout, a TransUnion company, at no cost. The form letter says you must enroll within 90 days of the letter's date with the code it gives, so letters from December 2025 have passed that window. A credit freeze at Equifax, Experian and TransUnion is free and has no deadline; the guide to credit monitoring offers explains the difference.

How many Washingtonians were affected by the 700Credit breach?

Washington's attorney general lists a notice from 700Credit, LLC, reported on December 12, 2025, with a breach date of October 25, 2025 and 121,828 Washingtonians affected. The record lists names, Social Security numbers and full dates of birth as the information compromised. The figure counts Washington residents only.

What the record leaves open

• How the web application was breached.
• Which dealerships' customers are among the 5,836,521.
• Whether the data has appeared for sale.