REVANCE THERAPEUTICS, INC.
bd_aea41b9feb5c8312 · schema v1 · pii pii-v1
Full breach record for REVANCE THERAPEUTICS, INC. →Revance Therapeutics, Inc. reported a data breach affecting 2,803 individuals after an unauthorized third party accessed company systems using compromised employee credentials between March 15, 2023, and April 10, 2023. The breach was discovered on April 9, 2023. The compromised information included names and financial account numbers with access codes. In response, Revance engaged a cybersecurity firm, notified law enforcement, and offered 24 months of identity monitoring services to affected individuals. The company has since enhanced its identity access and authentication controls.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5e56b9b5fb0d3cf2Montana State AGfiled 2023-07-10Candidate
- bd_7f46058d018c83e5Maine State AGfiled 2023-07-10Verified
- bd_e49d1ca886a02735California State AGfiled 2023-07-10Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f8e0d43b-9a45-49e9-ae01-976b9ad1a72b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 10, 2023
- Raw hash
- 1480a25fb6b8cbf2672ee3a0beaebc59d3d6d28e56f928205d096c4da4a63a3a
Reporting entity
- Name
- REVANCE THERAPEUTICS, INC.norm: revance therapeutics
Victim entity
- Name
- REVANCE THERAPEUTICS, INC.norm: revance therapeutics
Incident
- Discovered
- Apr 9, 2023
- Materiality determined
- —
- Notification sent
- Jul 10, 2023
- Affected individuals
- 2,803
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(92 days from discovery to filing)
- Compliance flags
- ME AG >90d · 92dME resident >60d · 92d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 9, 2023→ Filed with AG: Jul 10, 202392d 90 days ME AG >90d Maine Discovered: Apr 9, 2023→ Notified: Jul 10, 202392d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.