Whitepages
bd_315e08fb835d2a33 · schema v1 · pii pii-v1
All records for Whitepages →3 incidents on fileAccount takeover notice
Whitepages notified customers of unauthorized attempts to access their accounts. The filing says: “We determined that these attempts were part of a “credential stuffing” attack, in which someone used lists of usernames and passwords stolen from other, unrelated websites to try to log in to accounts on our site.”
On March 24, 2026, Whitepages detected a credential stuffing attack where attackers used stolen credentials from other sites to access user accounts. Affected data included names, email addresses, lookup history, and partial payment card information (last 4 digits). Whitepages disabled affected accounts, required password resets, and enhanced threat detection. No evidence of fraud or identity theft was found.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 24, 2026
Begins
Mar 24, 2026
Discovered
Mar 31, 2026
Filed
vs. sector median
10 wks faster
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- Nebraska State AGbd_8251a26f4ce3772a2026-03-31Verified
Filing propagation · 2 filings · 2 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.