What happened
In February 2026 the loan-brokerage platform youX confirmed that personal information had been accessed and downloaded after data was uploaded to a hacking forum [youx-acs], [youx-ib]. The exposed data covered roughly 444,000 borrowers and more than 600,000 loan applications — home addresses, income and debt details, government IDs and financial-hardship notes [youx-acs]. youX notified the OAIC.
Current status
Disclosed. An attacker claim that the data reached major lenders is unverified and is not asserted here; the ~444,000 figure derives from analysis of the leaked data [youx-acs].
Why it matters
Loan applications concentrate the most sensitive financial and identity data a person holds, making a breach of them particularly damaging.