The breach, which appears to have occurred in late March 2026, reportedly exposed sensitive personal information belonging to thousands of individuals, including names, physical addresses, phone numbers, email addresses, and in some cases, partial financial data.
The breach is likely to draw scrutiny from state attorneys general and federal regulators, particularly given PDL’s role as a data processor for other businesses. Class-action lawsuits have already been filed in the Northern District of California, alleging negligence and violation of data protection laws. pdl customer breach
“We immediately launched a full containment protocol upon discovery,” said PDL spokesperson Maya Cortez. “Our preliminary investigation indicates that the exposed data relates to a subset of enterprise customers who used our identity verification services between 2022 and 2025. We have since secured the affected server and are rotating all internal access keys.” The breach, which appears to have occurred in
PDL Confirms Customer Data Breach: Sensitive Information Exposed “We immediately launched a full containment protocol upon
This story is developing. PDL has promised a full public report within 45 days. We will update as more information becomes available.
PDL is notifying affected customers via email and has set up a dedicated response portal. The company is offering 24 months of complimentary credit monitoring and identity theft restoration services through a third-party provider.
PDL, a prominent data brokerage and identity verification service, has confirmed a significant customer data breach after a threat actor leaked a portion of its internal database on a cybercrime forum over the weekend.