Plaid’s CX Platform “KARTE” Fully Suspended Due to Unauthorized Access

Key points

On November 13, 2026, unauthorized access by a third party was detected on "KARTE," a customer experience (CX) platform provided by Plaid Inc. In response, all functions were sequentially suspended on the same day as emergency maintenance, resulting in a complete service halt. The suspension covers all projects using KARTE, including web and app user behavior measurement, various content deliveries, and management console operations. Investigations into the cause and the extent of the impact are ongoing, and no information has been disclosed regarding any data leakage. [1] [2]

Overview of Unauthorized Access Detection and Service Suspension

On November 13, 2026, Plaid Inc. detected unauthorized third-party access to its CX platform "KARTE." Consequently, emergency maintenance began at 17:00 Japan Standard Time on the same day, with all KARTE functions being sequentially suspended. The suspension affects all projects using KARTE and includes all functions such as web and app user behavior tracking, various content deliveries, and management console operations. The suspension was implemented gradually rather than immediately. [1] [2]

Plaid publicly announced the situation through official investor relations news and a status page, expressing deep apologies to client companies and stakeholders. The service suspension affects all KARTE projects, revealing a broad impact scope. Investigations and responses are ongoing. [1]

Details of Service Suspension and Impact Scope

The service suspension is not an immediate halt of all functions but is being carried out in stages. In particular, data being processed in job flows such as email delivery may be interrupted midway, and batch email deliveries might be halted before completion, as clarified on the official status page. As a result, client companies need to verify delivery statuses and check for any failures in data integration. [4]

The official status page specifies that batch email deliveries via KARTE Message may stop partway, and data integration processes in KARTE Datahub job flows may fail. These function suspensions could affect marketing initiatives and customer support activities of client companies, so users must monitor the latest information and respond accordingly. [4]

Investigation into Cause and Future Outlook

As of November 13, 2026, Plaid has not disclosed details such as the intrusion route, timing of the unauthorized access, or the extent of attacker access. Additionally, no information has been revealed regarding leakage of personal or customer data. Investigations and remediation efforts are ongoing, and Plaid has stated it will promptly provide updates if new facts emerge. [3] [1]

The timing for resuming services remains undecided, and the impact on the fiscal performance for December 2026 is still under review. Plaid has committed to promptly disclosing any new findings, and client companies and stakeholders are advised to closely follow official announcements and the status page. Further updates on response measures and investigation results are awaited. [1]