Playbook Data Breach

What happened?

In September 2021, a publicly accessible PostgresSQL database belonging to the Playbook service was identified . Run by VC firm Plug and Play Ventures, the database had been exposed since October 2020 and contained more than 50 thousand unique email addresses along with names, phone numbers, job titles and passwords stored as PBKDF2 hashes. It took more than 2 weeks after being notified of the exposed data to properly secure it. It's unknown whether Plug and Play Ventures notified impacted individuals as they ceased responding to queries from the press.

When did it happen?

The breach date in the public record is October 19, 2020. The record was added to the catalogue on October 11, 2021 and last updated there on October 11, 2021.

What information was reported as exposed?

• Email addresses
• Job titles
• Names
• Passwords
• Phone numbers
• Social media profiles

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Playbook or used playbook.vc around October 19, 2020. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.