Economic Injury Disaster Loan Application Portal

Summary

The Small Business Association (SBA) disclosed that approximately 8,000 business owners who applied for an Economic Injury Disaster Loan (EIDL) may have had their information exposed, including various forms of personally identifiable information such as Social Security numbers, addresses, dates of birth, and financial data. An error in the EIDL application portal allowed applicants to inadvertently view information belonging to other applicants if the back button was clicked while in the portal. The breach, only affecting EIDL and not the Paycheck Protection Program (PPP), was discovered by the SBA on March 25, 2020 and was immediately rectified. Affected applicants will receive notification and be offered a year of free credit reporting. Affected users are urged to monitor financial accounts for unusual activity and report the breach to their financial institution.