HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
AvidXchange, Inc.
bd_70bfa9f1fdb9ae57 · schema v1 · pii pii-v1
Full breach record for AvidXchange, Inc. →AvidXchange, Inc. reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred on March 2, 2023. The breach was discovered on April 3, 2023. Five Maine residents were affected, and a total of 6,495 individuals were impacted. The compromised information includes names and financial account/card numbers with associated security codes or PINs. Affected individuals were notified on October 13, 2023, and offered 12 months of credit monitoring and identity theft insurance services through IDX.
Maine clockDiscovered Apr 3, 2023 → Filed with AG Oct 13, 2023193d ✗ ME AG >90d28 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 211 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_3c63ece236c48fd8Leak Siteabyssfiled 2023-05-08(158d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_3a8108eae608cad6Montana State AGfiled 2023-10-13Verified by operator
- bd_300240bb0d41a1dbMaine State AGfiled 2023-12-10(58d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6340b6ac-cbc7-41a0-be30-2bc1bca72379.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 13, 2023
- Raw hash
- 6125c3be5c25f11d759ee69e350f4c14db071583da884af12ed2d79136d897d3
Reporting entity
- Name
- AvidXchange, Inc.norm: avidxchange
- Domain
- avidxchange.com
- Industry
- Financial Services
Victim entity
- Name
- AvidXchange, Inc.norm: avidxchange
- Domain
- avidxchange.com
- Industry
- Financial Services
Incident
- Discovered
- Apr 3, 2023
- Materiality determined
- —
- Notification sent
- Oct 13, 2023
- Affected individuals
- 5
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 28 weeks(193 days from discovery to filing)
- Compliance flags
- ME AG >90d · 193dME resident >180d · 193dLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 3, 2023→ Filed with AG: Oct 13, 2023193d 90 days ME AG >90d Maine Discovered: Apr 3, 2023→ Notified: Oct 13, 2023193d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.