HackingCustomer Data InvolvedLowContained
CARVANA CO.
bd_8e12cdda170d6c5a · schema v1 · pii pii-v1
Full breach record for CARVANA CO. →Carvana Co. experienced an external system breach on July 5, 2024, which was discovered on July 23, 2024, affecting four Maine residents. The company is offering 24 months of identity protection services through IDX.
Maine clockDiscovered Jul 23, 2024 → Filed with AG Sep 12, 202451d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_8c50c9e8458efb8bMontana State AGfiled 2024-09-12Candidate
- bd_a14d3886e53edc20Indiana State AGfiled 2024-09-12Verified
- bd_a2d5f6d907d31acdNew Hampshire State AGfiled 2024-09-12Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5990ec03-03c0-4aaf-88aa-12b2c8269d5a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 12, 2024
- Raw hash
- ae7658a1331da99be609d14923fcc2877e91c5ec7605709d3d1374fa82088541
Reporting entity
- Name
- CARVANA CO.norm: carvana
Victim entity
- Name
- CARVANA CO.norm: carvana
Incident
- Discovered
- Jul 23, 2024
- Materiality determined
- —
- Notification sent
- Sep 12, 2024
- Affected individuals
- 4
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- ME AG >30d · 51d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 23, 2024→ Filed with AG: Sep 12, 202451d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.