Klarna leaks customer data in pre-filled credit application forms
Learn More
The Swedish "Buy Now, Pay Later" fintech Klarna has confirmed a data leak of customer data.
The cause of the incident was as a technical error in Klarna's credit application form that resulted in pre-filling application pages with personal information belonging to other customers. The issue was detected when a customer attempting to apply for an installment plan through Klarna's online checkout system noticed that several pages of their application form had been automatically populated with details that appeared to belong to another user. The customer chose not to proceed with the application and reported the issue.
The exposed personal information included the following data types:
- First name
- Last name
- Date of birth
- Street address
- ZIP code
- City
- State
The number of affected individuals has not been disclosed. A Klarna spokesperson confirmed the data exposure but refused to provide specific information about how many customers were impacted or the duration of the exposure. In a statement provided on November 4, 2025, the company characterized the issue as "linked to a rare scenario that we are actively addressing" and claimed to have taken steps to strengthen safeguards. Klarna claims that the incident was "not the result of a system-wide issue or a customer data breach," though security experts typically define any unauthorized exposure of sensitive, non-public data as a leak or breach regardless of its origin.
The company provided no technical details about the root cause of what it termed a "rare scenario" and offered no timeline for when the vulnerability would be fully resolved.
