Byzfunder Data Breach Affects 15,164 People Exposing Social Security Numbers

Published
November 20, 2025
Updated
November 20, 2025
Byzfunder Data Breach Affects 15,164 People Exposing Social Security Numbers
Byzfunder
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Byzfunder

data breach?

Join the Lawsuit

It's free to join. 

On Nov. 19, 2025, Byzfunder NY, a non-bank alternative lender for small and medium-sized businesses, disclosed a significant cybersecurity incident between September 1, 2025, and September 20, 2025. An investigation revealed that personally identifiable information (PII) of at least 15,164 individuals were compromised.

The incident was first detected on Sept. 19, 2025, when Byzfunder identified suspicious activity within one of its cloud software solutions. The company immediately launched an investigation and engaged cybersecurity specialists to assist with the response.

On Nov. 12, 2025, Byzfunder confirmed that personal information belonging to thousands of individuals had potentially been compromised. The incident impacted at least 226 residents in Massachusetts, and 32 in Maine, with the total number of affected people potentially higher.

The types of information exposed in this incident may include names, dates of birth, addresses and Social Security numbers. The exposure of PII is considered severe, as it can lead to identity theft, financial fraud and other privacy risks for those affected.

The data breach was disclosed to the California, Maine and Massachusetts Attorney Generals' offices on Nov. 19, 2025, and the Vermont Attorney General on Nov. 20, 2025.

Byzfunder NY's response

In response to the breach, Byzfunder promptly investigated the incident, assessed the security of its systems and email environment, and worked to identify all individuals whose information may have been affected. On Nov. 19, 2025 the company began notifying customers with information about which individuals may have been impacted.

If you receive notification from Byzfunder or your provider about this breach, you may want to:

  • Sign up for the free IDX identity theft protection services, offered by Byzfunder.
  • Monitor your credit reports and financial accounts for any unusual activity.
  • Be alert for phishing emails or phone calls that may use your exposed information.
  • Consider placing a fraud alert or credit freeze with major credit bureaus.

For affected individuals with questions, Byzfunder has set up a call center at 833-781-8320, Monday through Friday, 9 a.m. to 9 p.m. ET.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image