CARVANA CO.

Carvana Co. notified New Hampshire AG of a security incident discovered July 5, 2024. Unauthorized parties used credentials obtained from a third-party breach to access a credit status system. Approximately 1,799 individuals were affected, including 5 New Hampshire residents. Data involved dates of birth and contact information. Carvana reset passwords, engaged forensic investigators, and offered identity protection services.