Whitepages
bd_8251a26f4ce3772a · schema v1 · pii pii-v2
All records for Whitepages →3 incidents on fileAccount takeover notice
Whitepages notified customers of unauthorized attempts to access their accounts. The filing says: “We determined that these attempts were part of a “credential stuffing” attack, in which someone used lists of usernames and passwords stolen from other, unrelated websites to try to log in to accounts on our site.”
Whitepages notified Nebraska residents of a credential stuffing incident detected on March 24, 2026. Attackers used stolen credentials from other sites to access accounts. Affected data included names, emails, order history, and partial payment card info. Whitepages disabled affected accounts, required password resets, and enhanced threat detection. No fraud or identity theft was found.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 24, 2026
Discovered
Mar 31, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- California State AGbd_315e08fb835d2a332026-03-31Candidate
Filing propagation · 2 filings · 2 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.