norm: public library of scienceUSno LEI · no CIKMax severity: Medium

Canonical registry

Public Library of Science

ent_2f2acd4ed80b7dcde9a39a0c

Compliance scorecard →View in feed →

Disclosures

1

State AG · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Public Library of Science
Normalized: public library of science— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: submit.plos.org

Disclosure history (1)newest first

Massachusetts State AGas victim2026-02-12
On February 3, 2026, Public Library of Science (PLOS) discovered a spear-phishing attack where an employee mistakenly responded to a phishing email, resulting in the unauthorized disclosure of US employees' 2025 W-2 forms. The compromised data included names, residential addresses, social security numbers, salary, and tax withholding information. PLOS immediately commenced an investigation, contacted the IRS and FBI, and is offering 24 months of complimentary Experian IdentityWorks to affected individuals. The incident is contained, and PLOS is implementing additional security training and policy reviews.