Aim Inc
ent_3f56291d08ee6f46c4c46c5f
Disclosures
3
State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
1,639
as filed · State AG WA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Aim Inc
- Normalized
- aim— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- aiminc.com
Disclosure history (3)newest first
- Washington State AGas victim2016-04-27
AIM Inc. notified Washington AG of unauthorized access to its website's document upload feature on April 4, 2016. An attacker exploited a vulnerability in the upload feature to access images containing customer names, driver's licenses, and in some cases SSNs and passports. 1,639 Washington residents were notified. AIM engaged a security firm, alerted law enforcement, removed the images, and offered one year of credit monitoring.
- South Carolina State AGas victim2016-04-27
AIM Inc notified South Carolina residents of a breach involving unauthorized access to images uploaded via a website document upload feature for firearms license age verification. The incident, discovered April 4, 2016, exposed names and driver's license numbers. AIM engaged a security firm, alerted law enforcement, removed images, and offered one year of credit monitoring.
- New Hampshire State AGas victim2016-04-02
AIM Inc notified NH AG of a breach where unauthorized access to a website upload feature exposed customer names and driver's licenses (and SSNs/passports for a small subset). 435 NH residents affected. Discovered April 4, 2016. Notifications mailed April 26, 2016. Remediation included removing images and enhancing upload security.