SBA said sensitive information about applicants may have been revealed to others applying for disaster loan program funds. The SBA is no longer accepting applications for the program. The data exposed included names, Social Security numbers, tax identification numbers, addresses, dates of birth, email, phone numbers, marital and citizenship status, household size, income, disclosure inquiry and financial and insurance information. Security experts urged any business that could have been affected to use caution, as there still might be fallout from any potential breach.
Source: https://threatpost.com/small-businesses-covid-19-loans-data-exposure/155013/