Astoria Company LLC
ent_c1ef9f1322dc887847ed5200
Disclosures
12
State AG · 11 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
9,400,000
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Astoria Company LLC
- Normalized
- astoria— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (12)newest first
- Montana State AGas victim2021-11-24
Astoria Company LLC notified individuals of a cyber-attack in late January 2021 where unauthorized access was gained to a system containing personal information. Astoria discovered the intrusion on Feb 8, 2021. Data accessed included names, addresses, SSNs, driver's licenses, and employment info. The incident was reported to the FBI.
- Delaware State AGas victim2021-11-24
Astoria Company LLC, a lead exchange connecting consumers with financial services, disclosed a cyber-attack in late January 2021. A security researcher gained unauthorized access to a database containing personal information. Astoria discovered the intrusion on February 8, 2021, secured systems, and conducted a forensic investigation. The incident involved the exfiltration of names, addresses, SSNs, driver's license numbers, and employment data. Astoria reported the incident to the FBI and implemented additional security measures.
- Maine State AGas victim2021-11-22
Astoria Company LLC experienced an external system breach on January 19, 2021, which was discovered on February 8, 2021. The breach affected 995 Maine residents, compromising their names and driver's license or non-driver identification card numbers. Affected individuals were notified electronically on November 24, 2021.
- Hawaii State AGas victim2021-11-22
Astoria Company, a lead exchange for financial services, notified individuals of unauthorized access by a security researcher in late January 2021. The attacker obtained personal data including SSNs and driver's licenses. Astoria detected the intrusion on Feb 8, 2021, engaged in forensic investigation, and reported the incident to the FBI.
- South Carolina State AGas victim2021-11-22
Astoria Company LLC notified individuals of a cyber-attack in late January 2021 where unauthorized access was gained to a system containing personal information. Astoria discovered the intrusion on Feb 8, 2021. Data accessed included names, addresses, SSNs, driver's licenses, and employment info. The incident was reported to the FBI.
- California State AGas victim2021-11-22
Astoria Company LLC disclosed that an alleged security researcher and an associate gained unauthorized access to a system containing personal information in late January 2021. Astoria became aware of the intrusion on February 8, 2021. The compromised data included names, addresses, emails, phone numbers, dates of birth, Social Security numbers, driver's license numbers, and employment information. Astoria secured its systems, conducted a forensic investigation, reported the incident to the FBI, and is implementing additional security measures. Identity monitoring services were offered to affected individuals.
- Washington State AGas victim2021-11-22
Astoria Company LLC, a web services lead exchange provider, disclosed a cyberattack in Washington. An external actor gained unauthorized access to a database containing PII (names, addresses, SSNs, driver's licenses) between Jan 19-29, 2021. Astoria discovered the intrusion on Feb 8, 2021. 22,095 Washington residents were notified starting Nov 24, 2021. The FBI was engaged.
- Oregon State AGas victim2021-11-22
Astoria Company LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2021-11-22. The breach occurred during 1/19/2021 - 1/29/2021. The breach was discovered on 2/8/2021. 940,000 individuals were affected. Notice was sent on 11/24/2021.
- Indiana State AGas victim2021-04-27
Astoria Company LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2021-01-05 and was reported on 2021-04-27. 17,817 Indiana residents were affected. 9,400,000 individuals affected in total.
- New Hampshire State AGas victim2021-04-26
Astoria Company LLC reported a cybersecurity incident to the New Hampshire Attorney General on April 26, 2021. An unknown actor gained unauthorized access to an Astoria system on January 5, 2021, and subsequently accessed a database containing personal information of approximately 74 individuals between January 19 and 29, 2021. Astoria discovered the intrusion on February 8, 2021. The compromised data included names, addresses, SSNs, and driver's license numbers. One New Hampshire resident was notified. Astoria reported the incident to the FBI and provided 24 months of credit monitoring via Experian.
- Delaware State AGas victim2021-01-29
Astoria Company LLC disclosed a cyber-attack in late January 2021 where unauthorized access was gained to a system containing personal information. Astoria detected the intrusion on February 8, 2021. The incident involved the exfiltration of names, addresses, SSNs, driver's licenses, and employment data. Astoria engaged in forensic investigation, secured systems, and reported the incident to the FBI.
- Illinois State AGas victim2021-01-01
ASTORIA COMPANY, LLC filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-474). The register records the breach as discovered on January 5, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.