The Credit Pros

Summary

The Credit Pros experienced a breach of its Salesforce environment after a threat actor identifying as Icarus claimed responsibility and alleged access to employee, customer and confidential business data. The compromised information reportedly included names, contact details, dates of birth, addresses, credit and debit card numbers, Social Security numbers and bank account information. Individuals who received notice of the incident face an elevated risk of identity theft and fraud, prompting a national class action law firm to investigate potential legal claims on behalf of affected persons.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On June 16, 2026, The Credit Pros became aware of a security incident affecting its Salesforce environment. The company learned of the breach on or about that date, according to its internal detection processes. Shortly thereafter, a threat actor using the alias Icarus publicly claimed responsibility for the intrusion. Icarus asserted that the breach granted access to employee, customer, and confidential business data stored within the Salesforce platform. The claim was communicated through channels typically used by the actor to announce compromises.

The types of personal information that may have been exposed include names, contact information, dates of birth, and physical addresses. Additionally, financial data such as credit and debit card numbers, Social Security numbers, and bank account details were reportedly accessible. The Credit Pros indicated that the compromised data could affect both individuals who use its services and employees of the company. Individuals who received a breach notification from The Credit Pros were advised that they face an elevated risk of identity theft and fraud. The scope of the exposure remains tied to the specific data fields housed in the Salesforce system at the time of the intrusion.

In response to the incident, The Credit Pros issued notifications to potentially affected individuals detailing the nature of the breach. Concurrently, the national class action law firm Edelson Lechtzin LLP announced an investigation into potential data privacy claims arising from the breach. The firm stated that it is evaluating whether a class action lawsuit could be pursued on behalf of those whose sensitive personal data may have been compromised. Edelson Lechtzin LLP offers free case evaluations to individuals seeking to understand their legal options. The firm provided contact information, including a phone number, email address, and physical office locations in Newtown, Pennsylvania, and referenced its web presence for further inquiries.

Edelson Lechtzin LLP describes itself as a national class action law firm with offices in Pennsylvania and California, handling a range of litigation beyond data breach cases. The Credit Pros identifies itself as a fintech company that provides credit repair, credit monitoring, and financial management services. The press release announcing the law firm's investigation was distributed on June 17, 2026, via a news wire service. No further technical details about the attack vector, containment measures, or timeline for remediation have been disclosed in the available source material.

Sources

Sources available to members: 1 source.