DAVE INC.

Dave, Inc. disclosed a data breach affecting customer records between June 23 and July 1, 2020, resulting from a compromise at a third-party service provider. The incident exposed names, emails, phone numbers, dates of birth, physical addresses, and encrypted Social Security numbers. Approximately 5,971 Rhode Island residents were specifically identified as affected. Dave notified the FBI, engaged forensic investigators, reset credentials, and offered credit monitoring.

Dave, Inc., a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2020-07-01 and filed notice on 2020-08-20. 40,998 Washington residents were affected. 50 days elapsed between awareness and notification. 8 days to identify the breach. 0 days to contain the breach.

Dave, Inc. disclosed a data breach occurring between June 23 and July 1, 2020, resulting from a compromise at a third-party service provider. The incident exposed customer PII including names, emails, phone numbers, dates of birth, physical addresses, and encrypted Social Security numbers. Hashed passwords were also stolen and potentially cracked. No financial account or credit card data was accessed. Dave notified the FBI, engaged forensic investigators, reset credentials, and offered credit monitoring via Mastercard ID Theft Protection.

Dave, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2020-08-20. The breach occurred during 6/23/2020 - 7/1/2020. The breach was discovered on 7/1/2020. 7,500,000 individuals were affected. Notice was sent on 8/21/2020.