PLAID INC.
bd_79e354f9ea473775 · schema v1 · pii pii-v1
Full breach record for PLAID INC. →Plaid, Inc. notified the New Hampshire Attorney General of a technical error involving approximately one New Hampshire resident. A phone number recycling practice caused a mismatch in Plaid accounts, potentially exposing profile information (name, DOB, address, driver's license, SSN) of a prior phone number owner to the new owner. No bank credentials were exposed. Plaid fixed the issue, severed connections, and offered two years of free identity protection services.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 25, 2024
Begins
Apr 22, 2026
Discovered
May 12, 2026
Filed
vs. sector median
8 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_56687978440ced8b2026-05-10 · +2dCandidate
- Maine State AGbd_42f17a17ff17098b2026-05-09 · +3dVerified
- Vermont State AGbd_e2e6377f025db1b22026-05-09 · +3dVerified
- Indiana State AGbd_0723faeb7182df552026-04-27 · +15dVerified
Show 1 more filing ↓Show fewer ↑up to 15d gap
- Nebraska State AGbd_7d4f7f4d83f719db2026-04-27 · +15dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Apr 27 (IN), last May 12 (NH) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.