Caravus LLC

Caravus LLC notified the NH AG of a data event involving 20 NH residents. Legacy data (names, SSNs) remained on a third-party provider's (Netgain) server after a 2015 migration and was potentially accessed during Netgain's Nov 2020 ransomware incident. Caravus determined this on April 26, 2021, and notified residents on May 28, 2021, offering 1 year of credit monitoring.

Caravus LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-05-28. 108 Massachusetts residents were affected. The report records the breach type as electronic.

Caravus LLC notified individuals of a data security incident involving third-party provider Netgain Technology, LLC. Netgain experienced a ransomware attack in November 2020. Caravus learned in April 2021 that legacy data from a 2015 migration was not destroyed and may have been accessed by an unknown actor. Data involved included names and other personal information. Caravus terminated the relationship with Netgain and offered 12 months of credit monitoring and identity theft protection.

Caravus LLC reported an external system breach (hacking) that occurred on November 15, 2020, and was discovered on April 26, 2021. The breach affected 11 Maine residents, compromising their names and Social Security numbers. Notification to affected consumers was sent on May 28, 2021. Caravus offered 12 months of credit and identity monitoring services through IDX to those affected.

Caravus LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2020-11-15 and was reported on 2021-05-28. 181 Indiana residents were affected. 49,228 individuals affected in total.

CARAVUS LLC filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-199). The register records the breach as discovered on April 26, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.