norm: avalaraUSLEI 549300Q16CMW239SS315 · no CIKMax severity: Medium

Canonical registry

AVALARA, INC.

ent_019ed7fb135ac38601af5f7f6084efab

Compliance scorecard →🔔 Follow entity

Disclosures

1

State AG · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: AVALARA, INC.
Normalized: avalara— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 549300Q16CMW239SS315
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

🐻California State AGas victim2019-06-07
Avalara, Inc. disclosed a data breach involving the eCompli software application, acquired from Compli, Inc. On May 22, 2019, a former Compli employee notified Avalara of a vulnerability that allowed unauthorized access to personal information of certain individuals at Avalara's customers. The exposed data included names, SSNs, driver's license numbers, dates of birth, and employment history. The third party deleted the accessed data and certified it was not shared. Avalara removed the vulnerability, investigated the scope, and offered credit monitoring.