norm: plus five five d b a resendUSno LEI · no CIKMax severity: Low

Canonical registry

Plus Five Five d/b/a Resend

ent_d3ee3779cebab863712c8e3e

Compliance scorecard →View in feed →

Disclosures

1

State AG · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Plus Five Five d/b/a Resend
Normalized: plus five five d b a resend— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

California State AGas victim2024-01-11
Resend disclosed that attackers accessed customer data including emails sent, domains, API keys (encrypted), logs, and contacts after discovering an exposed database API key as an environment variable on the client-side of the Resend Dashboard. The actual content of emails was not accessed. The incident occurred between December 30, 2023, and January 9, 2024. Resend rotated keys, enforced MFA, and engaged Oneleet for investigation.