AccidentalMisconfigurationCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
PLAID INC.
bd_79e354f9ea473775 · schema v1 · pii pii-v1
Full breach record for PLAID INC. →Plaid, Inc. notified the New Hampshire Attorney General of a technical error involving approximately one New Hampshire resident. A phone number recycling practice caused a mismatch in Plaid accounts, potentially exposing profile information (name, DOB, address, driver's license, SSN) of a prior phone number owner to the new owner. No bank credentials were exposed. Plaid fixed the issue, severed connections, and offered two years of free identity protection services.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_42f17a17ff17098bMaine State AGfiled 2026-05-09(3d gap)Verified
- bd_e2e6377f025db1b2Vermont State AGfiled 2026-05-09(3d gap)Verified
- bd_56687978440ced8bMassachusetts State AGfiled 2026-05-01(11d gap)Candidate
- bd_0723faeb7182df55Indiana State AGfiled 2026-04-27(15d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/plaid-20260512.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2026
- Raw hash
- 8f7332647a3d258e7f9a9cebd0274c2ae4157b37822976dd04573cf7508ba4f6
Reporting entity
- Name
- PLAID INC.norm: plaid
- Domain
- plaid.com
Victim entity
- Name
- PLAID INC.norm: plaid
- Domain
- plaid.com
Incident
- Discovered
- Apr 22, 2026
- Materiality determined
- —
- Notification sent
- Apr 27, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Department of Justice, Office of the Attorney General
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.