Aven Financial, Inc.
ent_019e61aeafb910b10e3afaf552540a7c
Disclosures
6
State AG · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
63,630
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Aven Financial, Inc.
- Normalized
- aven financial— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900JVSR3WB93MPN80
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- Indiana State AGas victim2023-07-31
Aven Financial, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-07-17 and was reported on 2023-07-31. 663 Indiana residents were affected. 63,630 individuals affected in total.
- Oregon State AGas victim2023-07-29
Aven Financial, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-07-29. The breach occurred during 7/17/2023 - 7/17/2023. The breach was discovered on 7/17/2023. 63,630 individuals were affected. Notice was sent on 7/28/2023.
- Montana State AGas victim2023-07-29
Aven Financial, Inc. notified Montana residents of a data security incident on July 17, 2023. A third-party security researcher discovered a temporary vulnerability in an in-development internal storage system, gaining unauthorized access to personal information including names, SSNs, and dates of birth. Aven remediated the vulnerability within 45 minutes. No passwords were accessed. Aven launched a bug bounty program.
- Massachusetts State AGas victim2023-07-29
Aven Financial, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-29. 366 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2023-07-28
Aven Financial, Inc. notified California residents that a security researcher gained unauthorized access to an internal, in-development storage system on July 17, 2023, via a temporary vulnerability. The researcher disclosed the issue within 45 minutes, and Aven remediated the vulnerability immediately. Affected data may include names, SSNs, driver's license numbers, and dates of birth. No passwords were accessed. Aven is offering 24 months of complimentary credit protection services.
- Illinois State AGas victim2023-01-01
AVEN FINANCIAL, INC. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-534). The register records the breach as discovered on July 17, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.