PLAID INC.

Plaid, Inc. notified the New Hampshire Attorney General of a technical error involving approximately one New Hampshire resident. A phone number recycling practice caused a mismatch in Plaid accounts, potentially exposing profile information (name, DOB, address, driver's license, SSN) of a prior phone number owner to the new owner. No bank credentials were exposed. Plaid fixed the issue, severed connections, and offered two years of free identity protection services.

Plaid, Inc. issued a Massachusetts data breach notice dated April 27, 2026, regarding an incident involving a subset of its services. The breach potentially exposed personal information, including names, Social Security numbers, dates of birth, and addresses. Plaid engaged IDX to provide complimentary two-year credit monitoring and identity protection services, including dark web monitoring. The specific nature of the unauthorized access was not detailed in the notice.

Plaid, Inc. reported an inadvertent disclosure affecting 294 individuals (4 in Maine) due to a technical issue involving phone number recycling. The incident, occurring on 12/25/2024 and discovered on 04/22/2026, exposed names, DOBs, addresses, driver's licenses, SSNs, and bank account details. No credentials were exposed. Plaid severed connections, removed incorrect accounts, and offered 24 months of identity protection services.

Plaid, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-05-09. The reporting organization type is Financial Services. 3 Vermont residents were affected. Categories of data breached: Financial Account Codes, Credit or Debit Account Info.

Plaid Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-12-25 and was reported on 2026-04-27. 5 Indiana residents were affected. 294 individuals affected in total.

Plaid, Inc. notified the Nebraska Attorney General of a technical error involving approximately one Nebraska resident. A mobile phone number recycling practice caused a mismatch in Plaid accounts, potentially exposing profile information (name, DOB, address, driver's license, SSN, bank account details) of a prior phone number owner to the new owner. The incident was not malicious. Plaid severed connections, removed incorrect accounts, and offered two years of identity protection services to the affected resident.