CARVANA CO.
ent_019ebd1205c2acb3db550e07773975d2
Disclosures
8
State AG · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
1,799
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CARVANA CO.
- Normalized
- carvana— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5493003WEAK2PJ5WS063
- SEC EDGAR CIK
- 0001690820
- Domain
- None on record
Disclosure history (8)newest first
- Massachusetts State AGas victim2024-09-13
Carvana Co. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-09-13. 29 Massachusetts residents were affected.
- Montana State AGas victim2024-09-12
Carvana Co. notified Montana residents of a data breach where unauthorized parties used credentials obtained from a third-party source to access Carvana accounts. Discovered July 5, 2024, the incident exposed names, dates of birth, contact info, and SSNs. Carvana reset passwords, engaged forensic investigators, notified law enforcement, and offered 24 months of identity protection.
- Maine State AGas victim2024-09-12
Carvana Co. reported an external system breach where unauthorized parties used credentials obtained from a third-party source to access a credit status system. The incident affected 1,799 individuals, including 4 Maine residents. Compromised data included names, dates of birth, contact info, and SSNs. Carvana reset passwords, engaged forensic investigators, notified law enforcement, and offered 24 months of identity protection services.
- Indiana State AGas victim2024-09-12
Carvana Co reported a data breach to the Indiana Attorney General. The breach occurred on 2024-07-05 and was reported on 2024-09-12. 39 Indiana residents were affected. 1,799 individuals affected in total.
- New Hampshire State AGas victim2024-09-12
Carvana Co. notified the NH Attorney General of a security incident where an unauthorized party used credentials obtained from another source to access user accounts. On July 5, 2024, Carvana discovered suspicious activity and reset passwords. Investigation revealed potential access to a credit status system for 1,799 individuals, including 3 New Hampshire residents. Data involved included usernames, passwords, dates of birth, and contact information. Carvana engaged forensic experts, notified law enforcement, and offered identity protection services.
- Massachusetts State AGas victim2022-03-30
Carvana, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-03-30. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2021-04-07
Carvana, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-07. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2021-02-05
Carvana, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-02-05. 1 Massachusetts residents were affected. The report records the breach type as electronic.