Whitepages
bd_8bcd4a08ab2e2b68 · schema v1 · pii pii-v2
All records for Whitepages →3 incidents on fileAccount takeover notice
Whitepages notified customers of unauthorized attempts to access their accounts. The filing says: “We determined that these attempts were part of a “credential stuffing” attack, in which someone used lists of usernames and passwords stolen from other, unrelated websites to try to log in to accounts on our site.”
Whitepages notified Nebraska residents of a credential stuffing incident detected on July 19, 2025. Attackers used stolen credentials from other sites to access Whitepages accounts. Affected data included names, emails, order history, and partial payment card details. Whitepages disabled affected accounts, forced password resets, and enhanced threat detection. No fraud or identity theft was found.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 19, 2025
Discovered
Aug 22, 2025
Filed
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- California State AGbd_542cb602019d93da2025-08-22Candidate
Filing propagation · 2 filings · 2 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.