YouLend US network breach exposes sensitive customer information

Fintech giant YouLend disclosed a cyber security incident involving its U.S. subsidiary, YouLend US, after unauthorised access to its network resulted in customer data being exposed.

 

Headquartered in London, YouLend is a global embedded financing platform offering revenue-based funding and merchant cash advances of up to £2 million to eligible SMBs through e-commerce platforms, marketplaces, and payment processors.

 

In a data security notice submitted to the office of New Hampshire Attorney General, YouLend US said it was alerted to suspicious activity on June 9 that disrupted its internal network. The company immediately launched a forensic investigation, with assistance from external cyber security firm to assess the incident’s scope and nature."

 

It also took steps to secure the affected systems and notified relevant law enforcement authorities about the incident.

 

“The investigation determined that our network was accessed without authorisation between June 5, 2026 to June 9, 2026, and that certain files contained your personal information,” YouLend US said.

 

The compromised data included names and other personal identifiers, financial account details, and payment card information. The company has not yet disclosed the number of individuals affected by the incident.

 

While YouLend US found no evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

It has also offered complimentary credit monitoring services through Cyberscout to all affected individuals.

 

No known threat actor claimed responsibility for the cyber attack at the time of publication. YouLend US also did not share details regarding the perpetrators, the exact volume of exfiltrated data, and whether a ransom demand was made.