Whitepages
bd_542cb602019d93da · schema v1 · pii pii-v1
All records for Whitepages →3 incidents on fileAccount takeover notice
Whitepages notified customers of unauthorized attempts to access their accounts. The filing says: “We determined that these attempts were part of a “credential stuffing” attack, in which someone used lists of usernames and passwords stolen from other, unrelated websites to try to log in to accounts on our site.”
On July 19, 2025, Whitepages detected a credential stuffing attack where stolen credentials from other sites were used to access user accounts. Affected data included names, email addresses, lookup history, and partial payment card information (last 4 digits). Whitepages disabled affected accounts, required password resets, and enhanced threat detection. No evidence of fraud or identity theft was found.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 19, 2025
Begins
Jul 19, 2025
Discovered
Aug 22, 2025
Filed
vs. sector median
6 wks faster
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- Nebraska State AGbd_8bcd4a08ab2e2b682025-08-22Verified
Filing propagation · 2 filings · 2 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.