PLAID INC.
bd_7d4f7f4d83f719db · schema v1 · pii pii-v1
Full breach record for PLAID INC. →Plaid, Inc. notified the Nebraska Attorney General of a technical error involving approximately one Nebraska resident. A mobile phone number recycling practice caused a mismatch in Plaid accounts, potentially exposing profile information (name, DOB, address, driver's license, SSN, bank account details) of a prior phone number owner to the new owner. The incident was not malicious. Plaid severed connections, removed incorrect accounts, and offered two years of identity protection services to the affected resident.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 26, 2024
Begins
Apr 22, 2026
Discovered
Apr 27, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Indiana State AGbd_0723faeb7182df552026-04-27Verified
- Maine State AGbd_42f17a17ff17098b2026-05-09 · +12dVerified
- Vermont State AGbd_e2e6377f025db1b22026-05-09 · +12dVerified
- Massachusetts State AGbd_56687978440ced8b2026-05-10 · +13dCandidate
Show 1 more filing ↓Show fewer ↑up to 15d gap
- New Hampshire State AGbd_79e354f9ea4737752026-05-12 · +15dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Apr 27 (IN), last May 12 (NH) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.