PLAID INC.
bd_79e354f9ea473775 · schema v1 · pii pii-v1
Full breach record for PLAID INC. →Plaid, Inc. notified the New Hampshire Attorney General of a technical error involving approximately one New Hampshire resident. A phone number recycling practice caused a mismatch in Plaid accounts, potentially exposing profile information (name, DOB, address, driver's license, SSN) of a prior phone number owner to the new owner. No bank credentials were exposed. Plaid fixed the issue, severed connections, and offered two years of free identity protection services.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 25, 2024
Begins
Apr 22, 2026
Discovered
May 12, 2026
Filed
vs. sector median
16 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_56687978440ced8b2026-05-10 · +2dCandidate
- Maine State AGbd_42f17a17ff17098b2026-05-09 · +3dVerified
- Vermont State AGbd_e2e6377f025db1b22026-05-09 · +3dVerified
- Indiana State AGbd_0723faeb7182df552026-04-27 · +15dVerified
Show 1 more filing ↓Show fewer ↑up to 15d gap
- Nebraska State AGbd_7d4f7f4d83f719db2026-04-27 · +15dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Apr 27 (IN), last May 12 (NH) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.