Varsity Tutors LLC
ent_59a778dd337f2a4ed1ab5201
Disclosures
8
State AG · 8 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
24,421
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Varsity Tutors LLC
- Normalized
- varsity tutors— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- varsitytutors.com
Disclosure history (8)newest first
- New Hampshire State AGas victim2022-06-09
Varsity Tutors LLC notified the NH AG of a data event involving a misconfigured AWS S3 bucket. Unauthorized access or acquisition of government-issued photo ID for 32 NH residents was possible between Nov 1-6, 2021. Varsity Tutors remediated the bucket, investigated, and offered 12 months of credit monitoring to affected individuals.
- California State AGas victim2022-06-03
Varsity Tutors LLC notified the California Attorney General of a data breach involving a misconfigured Amazon Web Services (AWS) S3 storage bucket. The incident occurred between November 1 and November 6, 2021, and was discovered in late October 2021 after a cyber researcher alerted the company. The potentially exposed data included images of government-issued photo identification (e.g., driver's licenses) uploaded by individuals interested in becoming tutors. Varsity Tutors remediated the misconfiguration, conducted an investigation with cybersecurity specialists, and offered credit monitoring and identity protection services to affected individuals. No evidence of misuse was found.
- Washington State AGas victim2022-06-03
Varsity Tutors LLC notified Washington AG of a data event affecting 655 residents. An AWS S3 bucket was misconfigured, potentially exposing government-issued photo ID between Nov 1-6, 2021. Discovered Oct 20, 2021. Notification sent June 3, 2022. Credit monitoring offered.
- Montana State AGas victim2022-06-03
Varsity Tutors LLC notified Montana residents of a data incident involving a misconfigured AWS S3 bucket. Unauthorized access to government-issued ID images was possible between Nov 1-6, 2021. The company remediated the misconfiguration, engaged cybersecurity specialists, and offered credit monitoring services.
- Oregon State AGas victim2022-06-03
Varsity Tutors LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2022-06-03. The breach occurred during 11/1/2021 - 11/6/2021. The breach was discovered on 5/11/2022. 24,421 individuals were affected. Notice was sent on 6/3/2022.
- Indiana State AGas victim2022-06-03
Varsity Tutors LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2021-11-01 and was reported on 2022-06-03. 324 Indiana residents were affected. 24,421 individuals affected in total.
- Massachusetts State AGas victim2022-06-03
Varsity Tutors LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-06-03. 823 Massachusetts residents were affected. The report records the breach type as electronic.
- Maine State AGas victim2022-06-03
Varsity Tutors LLC reported a breach occurring between Nov 1-6, 2021, discovered on May 11, 2022. Approximately 24,421 individuals were affected, including 19 Maine residents. The incident involved unauthorized access resulting in the acquisition of names and driver's license numbers. Varsity Tutors notified consumers on June 3, 2022, and provided 12 months of credit monitoring and identity restoration services via Equifax.