Storylayer Insider Update Go
StoryLayer.org Storylayer Insider Update Guides
Blog Business Local Politics Tech World

SCDCA Warns Data Breach – How to Claim Free Credit Monitoring

James Benjamin Mercer Gray • 2026-04-08 • Reviewed by Daniel Mercer

The South Carolina Department of Consumer Affairs has issued urgent warnings regarding three significant data breaches affecting residents statewide. Recent regulatory filings reveal that Prosper Marketplace, Kaplan North America, and educational technology provider PowerSchool all experienced unauthorized access to sensitive consumer information, exposing millions of records including Social Security numbers, financial account details, and student data.

Alerts posted by the agency confirm that over 260,000 South Carolinians across the first two incidents alone face elevated identity theft risks, with additional exposure affecting students in nearly every public school district across the state. The breaches span financial services, educational testing, and K-12 administrative systems.

State officials emphasize that while unauthorized parties accessed personal data in each case, companies have activated response protocols and are providing credit monitoring services. Consumers must take specific enrollment steps to activate these protections before deadlines expire.

What is the SCDCA Data Breach Warning About?

Alert Issuer
SCDCA
Breach Type
Data exposure
Affected
Consumers in SC
Status
Active warning

The South Carolina Department of Consumer Affairs disclosed notification filings from three distinct entities. Prosper Marketplace reported unauthorized database access affecting 236,000 state residents. Kaplan North America confirmed network infiltration impacting 26,612 individuals. PowerSchool acknowledged a student data compromise reaching nearly all districts except four.

Key Insights

  • Financial services and education sectors represent the primary targets
  • Over 13 million consumers nationwide affected by the Prosper incident alone
  • Statewide breach impact dropped 56% in 2025 compared to 2024
  • Free Experian IdentityWorks monitoring available to all verified victims
  • Child identity theft flagged as specific risk in school data exposure
  • Credit monitoring enrollment deadlines vary by incident
Fact Details
Total SC Residents Affected (2025) 2,985,506
Prosper Marketplace (SC Impact) 236,000 residents
Kaplan North America (SC Impact) 26,612 residents
PowerSchool District Coverage All except four districts
Prosper Nationwide Impact Over 13 million records
2025 Breach Incidents 99 total events
Year-over-Year Change 56% decline from 2024
Kaplan Unauthorized Access Period October 30 – November 18, 2025

Which Companies and Residents Were Impacted?

Prosper Marketplace Financial Data Exposure

Between June and August 2025, unauthorized actors executed database queries against Prosper Marketplace systems. The company discovered the intrusion on September 1, 2025, and publicly disclosed the incident on September 17. Records indicate that exposed information encompassed names, Social Security numbers, dates of birth, bank account numbers, driver’s license numbers, passport numbers, tax information, and payment card numbers.

Investigators found no evidence that attackers accessed actual accounts or withdrew funds. The company filed official notice with SCDCA on December 11, 2025, offering affected individuals two years of complimentary credit monitoring through Experian IdentityWorks.

Kaplan North America Network Infiltration

Kaplan North America detected unauthorized network access occurring between October 30 and November 18, 2025. The exposure impacted 26,612 South Carolina residents. Compromised data elements included names, Social Security numbers, and driver’s license numbers.

The company activated incident response protocols and notified law enforcement authorities. SCDCA officially confirmed the breach notification on March 17, 2026. Kaplan is providing affected individuals with free identity theft detection services through Experian IdentityWorks.

PowerSchool Student Records Compromise

PowerSchool reported a breach affecting students across nearly all South Carolina public school districts, with only four districts excluded from the incident. The exposure specifically targeted children’s information, raising distinct concerns regarding minor identity theft.

Critical Alert: Child Identity Theft

SCDCA specifically urged parents to request credit reports for their children. Minors typically have no credit history; the appearance of a report indicates potential identity theft using compromised school data.

Specific technical details regarding the PowerSchool exposure dates and exact record counts remain undisclosed in public notices.

Complimentary Protection Available

Both Prosper Marketplace and Kaplan North America are offering two years of Experian IdentityWorks credit monitoring at no charge. Enrollment requires using activation codes provided in individual notification letters.

What Should Consumers Do Following the SCDCA Alert?

Activate Credit Monitoring Services

Affected individuals must enroll in the complimentary Experian IdentityWorks programs offered by Prosper and Kaplan. These services provide credit monitoring, dark web surveillance, and identity theft insurance. Activation deadlines apply based on individual notification dates.

Review Financial and Credit Reports

Residents should obtain free credit reports from all three bureaus through AnnualCreditReport.com. Parents must specifically request minor credit reports for children whose school districts utilize PowerSchool. The Federal Trade Commission’s recovery hub provides step-by-step guides for reviewing these documents.

Report Suspicious Activity Immediately

Victims who detect unauthorized accounts or fraudulent transactions should contact the SCDCA Identity Theft Unit at 1-800-922-1594. The agency provides specialized guidance for South Carolina residents navigating freeze and fraud alert procedures. Additional resources appear on the SCDCA Security Breach Notices page.

Documentation Requirements

When reporting fraud, provide copies of the breach notification letter, suspicious account statements, and any police reports. SCDCA recommends maintaining organized records of all identity theft-related correspondence.

Timeline of the SCDCA Data Breach Warnings

  1. : Unauthorized database queries executed against Prosper Marketplace systems
  2. : Prosper Marketplace discovers security incident
  3. : Prosper publicly reports breach and begins individual notifications
  4. : Unauthorized access to Kaplan North America network occurs
  5. : Prosper files formal breach notice with SCDCA
  6. : SCDCA confirms Kaplan North America breach warning
  7. : SCDCA hosts free public webinar on data breach response steps at 10:30 a.m.

PowerSchool specific dates remain undisclosed in available regulatory filings.

What Has Been Confirmed and What Remains Unclear?

Established Facts

  • Prosper Marketplace: 236,000 South Carolinians affected; access occurred June-August 2025
  • Kaplan North America: 26,612 residents affected; access occurred October 30-November 18, 2025
  • Data types: Names, SSNs, driver’s licenses, financial account numbers, passport data
  • PowerSchool: All districts except four impacted
  • No evidence of fund withdrawal in Prosper incident
  • 2025 statewide impact: 2,985,506 residents across 99 breaches

Information Awaiting Confirmation

  • Specific technical intrusion dates for PowerSchool systems
  • Exact number of students affected by PowerSchool breach
  • Whether PowerSchool data has appeared on dark web marketplaces
  • Full geographic scope of Prosper Marketplace intrusion beyond disclosed dates
  • Specific law enforcement agencies handling each investigation

How Does SCDCA Monitor Breaches Statewide?

The South Carolina Department of Consumer Affairs maintains statutory authority requiring businesses to notify residents when security breaches expose personal information. The agency publishes all notices affecting over 1,000 residents on its dedicated portal, maintaining public records dating to 2015.

Annual analysis reveals that 2025 saw 99 breaches affecting approximately 2.98 million residents, representing a 56% decline from the 6.71 million impacted during 2024. Financial services, healthcare, and education constitute the most frequently targeted sectors. Public radio reports confirm these statistics reflect improved corporate security postures rather than reduced attack volumes.

SCDCA supplements enforcement with educational initiatives. The agency hosted a complimentary webinar on March 18, 2026, detailing breach response protocols, and publishes quarterly business compliance webinars alongside an updated “Identity Theft & The Law” guide. Free AI Art Generator – Top Unlimited Picks 2025 represents unrelated consumer technology coverage.

Official Statements and Resources

Primary documentation for these incidents resides on the South Carolina Department of Consumer Affairs website. The agency’s Identity Theft Unit maintains dedicated hotlines and printable guides for victims.

Consumers who suspect identity theft should contact the SCDCA Identity Theft Unit immediately at 1-800-922-1594 to initiate protective measures.

SCDCA Official Guidance

Additional federal guidance appears through the Federal Trade Commission and the IdentityTheft.gov recovery platform.

Key Protections for Affected Residents

Three distinct data exposures have placed hundreds of thousands of South Carolina residents at identity theft risk. While Prosper Marketplace and Kaplan North America have provided specific victim counts and remediation services, PowerSchool’s student data exposure requires parental vigilance regarding minor credit reports. Enrollment in complimentary monitoring programs, regular credit review, and immediate reporting of suspicious activity to SCDCA at 1-800-922-1594 constitute essential protective measures. What Is a Favicon – Sizes, Formats and Implementation Guide provides additional technical context on web security indicators.

Frequently Asked Questions

Are there official resources from SCDCA for breach victims?

Yes. The SCDCA maintains a Security Breach Notices portal listing all incidents affecting over 1,000 residents since 2015. The Identity Theft Unit offers free guides and operates a dedicated hotline at 1-800-922-1594.

What is the scope of the data exposed in these breaches?

Prosper Marketplace exposed names, SSNs, bank accounts, driver’s licenses, passports, and payment cards. Kaplan exposed names, SSNs, and driver’s licenses. PowerSchool exposed student data including children’s personal information.

How can I check if my child’s school was affected by the PowerSchool breach?

SCDCA confirmed that all South Carolina school districts except four were affected. Parents should contact their specific school district administration or check the SCDCA breach notices page for district-specific updates.

Is the credit monitoring offered by Prosper and Kaplan truly free?

Yes. Both companies provide two years of Experian IdentityWorks at no charge to affected individuals. Enrollment requires using activation codes from notification letters. No payment information is required for registration.

What should I do if I never received a breach notification letter?

Check the SCDCA Security Breach Notices database for your name. Contact the company directly using verified numbers from their official website, not links in emails. Monitor your credit reports for unauthorized accounts regardless.

How long do I have to enroll in the free credit monitoring?

Deadlines vary by incident and are specified in individual notification letters. Typically, enrollment periods extend several months from the notification date. Prosper filed notice December 2025; Kaplan was confirmed March 2026.

Does South Carolina law require companies to notify consumers of breaches?

Yes. South Carolina law mandates businesses notify affected residents when personal information is compromised. SCDCA requires companies to file notices when over 1,000 residents are impacted, making these records publicly accessible.

What are the signs of child identity theft I should watch for?

Unexpected credit reports or collection notices addressed to your child indicate identity theft. SCDCA urges parents to request credit reports for minors, as the presence of any report suggests fraudulent activity using compromised school data.

James Benjamin Mercer Gray

About the author

James Benjamin Mercer Gray

Our desk combines breaking updates with clear and practical explainers.