HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedData PublishedIDENTITY_BASICIDENTITY_GOVERNMENTCREDENTIALSMediumContained
DAVE INC.
bd_e092890dc5d3fb2a · schema v1 · pii pii-v1
Full breach record for DAVE INC. →Dave, Inc. disclosed a data breach affecting customer records between June 23 and July 1, 2020, resulting from a compromise at a third-party service provider. The incident exposed names, emails, phone numbers, dates of birth, physical addresses, and encrypted Social Security numbers. Approximately 5,971 Rhode Island residents were specifically identified as affected. Dave notified the FBI, engaged forensic investigators, reset credentials, and offered credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5e95299fb85377f6Washington State AGfiled 2020-08-20(1d gap)Candidate
- bd_96afc6c3b4dc3c74California State AGfiled 2020-08-20(1d gap)Verified
- bd_ea97508608d29423Oregon State AGfiled 2020-08-20(1d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2020/09/Dave-Inc-Template-notice-to-customers.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 21, 2020
- Raw hash
- 42cf62f7bf433fb73fb81c1b0aeb39ca8901bb33ef84da9c23fbb8c2c941d9cf
Reporting entity
- Name
- DAVE INC.norm: dave
Victim entity
- Name
- DAVE INC.norm: dave
Incident
- Discovered
- Jul 1, 2020
- Materiality determined
- —
- Notification sent
- Aug 21, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTCREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement, including the Federal Bureau of Investigation ("FBI")
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.