About GreenSky, LLC
GreenSky, LLC, a financial services organization based in Alpharetta, GA, recently experienced a data breach. The breach, described as an external system breach due to hacking, affected customer-related databases. Although the total number of individuals affected is unspecified, the breach impacted at least one Maine resident. The breach occurred between August 13, 2025, and August 18, 2025, and was discovered on September 11, 2025.
What Happened
On August 21, 2025, GreenSky received a report of a possible security issue affecting the Salesloft Drift application used by thousands of customers of the Salesforce cloud-based platform, including GreenSky. On August 29, 2025, Salesloft provided us with additional information regarding the security issue. Based on this information, GreenSky conducted a forensic investigation, with the assistance of third-party cybersecurity specialists, to determine if any of our systems were impacted and what data might have been involved. Our investigation found that between August 13, 2025, and August 18, 2025, several customer-related GreenSky databases were accessed by an unauthorized actor. We then conducted a comprehensive review of the affected databases to determine what, if any, sensitive information was at risk of unauthorized access. We recently completed this review, and we are notifying you because the investigation determined that certain information related to you was contained in the affected databases.
The breach involved unauthorized access to several GreenSky databases, affecting customer-related information, including names and Social Security numbers. The breach was identified on September 11, 2025.
Next Steps
Affected users should remain vigilant for any signs of identity theft or fraud by regularly reviewing their account statements and monitoring their credit reports for any suspicious activity. GreenSky recommends that individuals report any suspected identity theft to their credit card company and/or bank, place a fraud alert or security freeze on their credit file, and contact the Federal Trade Commission and state Attorney General if necessary. Notifications have been sent to relevant state and federal regulators, as well as the three major credit reporting agencies.
Identity Theft Protection Services
GreenSky is offering impacted individuals 24 months of complimentary credit monitoring and identity restoration services through Cyberscout, a TransUnion company. These services will provide alerts for any changes to credit files and offer proactive fraud assistance. Impacted individuals are encouraged to enroll in these services as soon as possible by following the provided activation instructions. This enrollment requires an internet connection and may not be available to individuals under the age of 18.