Divvy
ent_3411ed286144a6bcc902756f
Disclosures
8
State AG · 5 jurisdictions
Incidents
2
filings grouped by incident
Max affected reported
46,958
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Divvy
- Normalized
- divvy— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- divvy.app
Disclosure history (8)newest first
- 🐻California State AGas victim2021-07-30
Divvy Up, Inc. reported a data breach involving its website hosting provider. Malware was downloaded to the hosted website, compromising payment transactions between May 10, 2020, and June 18, 2021. Affected data included names, addresses, and payment card details (number, CVC, expiration). PayPal transactions remained secure. Divvy Up engaged a security service, removed malware, upgraded protocols, and restricted payments to PayPal.
- 🦬Montana State AGas victim2021-07-30
Divvy Up, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2021-07-30. The breach occurred from 5/10/2021 to 6/18/2021. 92 Montana residents were affected.
- 🦞Maine State AGas victim2021-05-04
Divvy Up, Inc. reported an external system breach (hacking) occurring between December 1, 2020, and March 8, 2021, discovered on March 10, 2021. The incident affected 46,958 individuals, including 185 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). Written notifications were sent on May 3, 2021. No identity theft protection services were offered.
- 🦫Oregon State AGas victim2021-05-03
Divvy Up, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2021-05-03. The breach occurred during 12/1/2020 - 3/8/2021. The breach was discovered on 3/10/2021. 46,958 individuals were affected. Notice was sent on 5/3/2021.
- 🦬Montana State AGas victim2021-05-03
Divvy Up, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2021-05-03. The breach occurred from 12/1/2020 to 3/8/2021. 113 Montana residents were affected.
- 🐻California State AGas victim2021-05-03
Divvy Up, Inc. reported a data breach involving its website hosting provider. Malware was downloaded to the hosted website, compromising payment transactions between December 1, 2020, and March 8, 2021. Affected data included names, addresses, and payment card details (number, CVC, expiration). The company engaged forensic experts, removed malware, and upgraded security protocols.
- 🌲Washington State AGas victim2021-05-03
Divvy Up, Inc., a business sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2021-03-10 and filed notice on 2021-05-03. 1,012 Washington residents were affected. 54 days elapsed between awareness and notification. 99 days to identify the breach. 0 days to contain the breach.
- 🌲Washington State AGas victim2021-05-03
Divvy Up, Inc., a business sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2021-03-10 and filed notice on 2021-05-03. 1,137 Washington residents were affected. 54 days elapsed between awareness and notification. 99 days to identify the breach. 0 days to contain the breach.