norm: plusUSno LEI · no CIKMax severity: Low

Canonical registry

Resend

ent_ce10e841d114c175275bac5b

Compliance scorecard →View in feed →

Disclosures

1

State AG · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Resend
Normalized: plus— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: plusweb.org

Disclosure history (1)newest first

California State AGas reporting2024-01-11
Resend disclosed that attackers accessed customer data including emails sent, domains, API keys (encrypted), logs, and contacts after discovering an exposed database API key as an environment variable on the client-side of the Resend Dashboard. The actual content of emails was not accessed. The incident occurred between December 30, 2023, and January 9, 2024. Resend rotated keys, enforced MFA, and engaged Oneleet for investigation.