UnknownMedium
APPFOLIO, INC.
bd_0ab3c8362a49414b · schema v1 · pii pii-v1
Full breach record for APPFOLIO, INC. →AppFolio, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2025-10-06. The breach occurred during 8/8/2025 - 8/18/2025. The breach was discovered on 9/18/2025. 72,444 individuals were affected. Notice was sent on 10/6/2025.
Oregon clock✓ OR AG ≤45d18 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 10 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- bd_2dbe73b43013007fVermont State AGfiled 2025-10-06Verified
- bd_590685df26b700a9Iowa State AGfiled 2025-10-06Verified
- bd_7b911a86227b2297Indiana State AGfiled 2025-10-06Verified
- bd_a9707e98f1214ee6Maine State AGfiled 2025-10-06Verified
Show 5 more filings ↓Show fewer ↑up to 1d gap
- bd_bba06e3c593b96adWashington State AGfiled 2025-10-06Verified
- bd_bf40a737f4fa3c9aNew Hampshire State AGfiled 2025-10-06Verified
- bd_e971dd45d6d2c1a2California State AGfiled 2025-10-06Verified
- bd_fc212894d34ee2afMontana State AGfiled 2025-10-06Verified
- bd_2b0795c3c4216d87Texas State AGfiled 2025-10-07(1d gap)Verified
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 6, 2025
- Raw hash
- f2822b616252fa1498065101bfeec892e3a22c0d5dace1e840baebfd2915280c
Reporting entity
- Name
- APPFOLIO, INC.norm: appfolio
Victim entity
- Name
- APPFOLIO, INC.norm: appfolio
Incident
- Discovered
- Sep 18, 2025
- Materiality determined
- —
- Notification sent
- Oct 6, 2025
- Affected individuals
- 72,444
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- OR AG ≤45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.