Aven Financial, Inc.
bd_8773e72dbac0b13d · schema v1 · pii pii-v1
Full breach record for Aven Financial, Inc. →Aven Financial, Inc. notified Montana residents of a data security incident on July 17, 2023. A third-party security researcher discovered a temporary vulnerability in an in-development internal storage system, gaining unauthorized access to personal information including names, SSNs, and dates of birth. Aven remediated the vulnerability within 45 minutes. No passwords were accessed. Aven launched a bug bounty program.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 17, 2023
Begins
Jul 17, 2023
Discovered
Jul 29, 2023
Filed
vs. sector median
8 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Oregon State AGbd_3ffe616a2c045d6a2023-07-29Verified
- Massachusetts State AGbd_e42345ef77de2d7f2023-07-29Verified
- California State AGbd_c1f5906b42b7eac22023-07-28 · +1dVerified
- Indiana State AGbd_e236ee8bf8e37d9f2023-07-31 · +2dVerified
Show 1 more filing ↓Show fewer ↑up to 209d gap
- Illinois State AGbd_80738d1e620d0ed92023-01-01 · +209dCandidate
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Jul 31 (IN) — a 211-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.