AvidXchange Holdings, Inc.

AvidXchange, Inc., a financial services company, reported a data breach impacting 204 individuals. The breach, which occurred on March 2, 2023, was an external system hack discovered on April 3, 2023. The compromised information included names combined with financial account or credit/debit card numbers and their associated security codes or PINs. The company began notifying affected individuals on November 1, 2023, and offered 12 months of complimentary credit monitoring and identity theft insurance services.

AvidXchange, Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-10-13. 124 Massachusetts residents were affected. The report records the breach type as electronic.

AvidXchange, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-02 and was reported on 2023-10-13. 7 Indiana residents were affected. 6,495 individuals affected in total.

AvidXchange, Inc. notified individuals of a cybersecurity incident detected in April 2023. Threat actors extracted personal information (names and variable data) and published data sets in May 2023. AvidXchange engaged forensic experts, notified law enforcement, and expelled the actor. Remediation included enhanced access controls and virtual desktop deployment. Identity theft protection services were offered.

AvidXchange, Inc. reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred on March 2, 2023. The breach was discovered on April 3, 2023. Five Maine residents were affected, and a total of 6,495 individuals were impacted. The compromised information includes names and financial account/card numbers with associated security codes or PINs. Affected individuals were notified on October 13, 2023, and offered 12 months of credit monitoring and identity theft insurance services through IDX.

AvidXchange, Inc All database backups from production servers

Payment software giant AvidXchange suffers its second ransomware attack of 2023. AvidXchange: Hackers have published sensitive data stolen from AvidXchange, a payment software company, following a second ransomware attack this year. The stolen data includes non-disclosure agreements, employee payroll information, and corporate bank account numbers. Login data has also been leaked, including usernames, passwords, and security question answers for various corporate systems. Easily guessable passwords suggest that the company uses lax security practices. AvidXchange confirmed that data was exfiltrated in April but refused to answer TechCrunch's questions regarding a potential ransom demand. Linked ransomware group: abyss.

AvidXchange, Inc All database backups from production servers

We’re the ones who believe there’s a faster, more efficient way for middle-market businesses to process invoices and make payments; and who, as your ally, want to liberate your AP from all that paperwork that’s slowing down your business and costing you money.