UnknownManufacturingManufacturingCustomer Data InvolvedPIIIdentity (basic)EmploymentLowContained

AVIENT CORPORATION

bd_bb9b927201df4703 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 22, 2023

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

67%

Full breach record for AVIENT CORPORATION →2 incidents on file

Avient Corporation experienced a cybersecurity incident on or around April 9, 2023, causing disruption to IT systems. On July 6, 2023, the company determined that personal information of some individuals was stored on impacted servers. The company engaged third-party forensics, contained the incident, reset passwords, implemented MFA, and offered 24 months of identity monitoring via Kroll. No specific data types or counts were disclosed in the notice template.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 9, 2023

Begins

Aug 22, 2023

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_25ce1e5b9e73ecb12023-08-22Verified
New Hampshire State AGbd_f69c86604472d84a2023-08-21 · +1dVerified

Name: AVIENT CORPORATION
norm: avient

Name: AVIENT CORPORATION
norm: avient
Industry: Manufacturingllm

Discovered: —
Breach occurred: Apr 9, 2023
Materiality determined: —
Notification sent: Aug 22, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Employment
Attack vector: Unknown

During the incident: Immediately took steps to protect potentially impacted individuals and our systems
Initiated an investigation to determine the scope of the incident
Engaged leading third-party cybersecurity forensics firms
Voluntarily and temporarily restricted access to select systems as a precautionary measure
Increased our data security measures through implementation of additional security monitoring tools
Ensuring associate password resets
Implementing additional multi-factor authentication measures on specific systems
Purchased identity monitoring services for you through Kroll
Changes made: Plans to implement additional data security measures
Additional training of associates for continued awareness of these types of incidents
Work closely with our external industry-leading service providers to implement additional incremental security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGAug 21 · first

Indiana State AG+1d

Vermont State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-08-22-avient-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 22, 2023
Raw hash: a08374474dc27fd8e6d6c4551e913fe3cf43f4ef5f2c4a9bd1920210cc3a87b6

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAVIENT CORPORATION

Victim entityAVIENT CORPORATION

IncidentUnknown

Stated responseImmediately took steps to protect potentially impacted individuals and our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov