750,000 people had Social Security numbers and financial data exposed.

Many never became customers, only inquiring about a loan through a third party.

Lead-generation forms get resold to multiple lenders, each keeping full application data indefinitely, regardless of whether a loan closed.

The debt-consolidation firm has not said what credit monitoring it will offer those affected.

Sources: The Record