Volusion
ent_e3ea8e93dbba648c0f120096
Disclosures
11
State AG · 11 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
541,000
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Volusion
- Normalized
- volusion— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (11)newest first
- New Hampshire State AGas victim2020-04-22
Volusion, LLC notified the New Hampshire Attorney General of a data security incident affecting approximately 3,170 NH residents. Malware on Volusion's e-commerce platform exposed customer data (names, addresses, credit card numbers, CVVs, expiration dates) for purchases made between Sept 7 and Oct 8, 2019. Volusion removed the malware, notified the FBI, and engaged forensic experts.
- Oregon State AGas victim2020-04-21
Volusion LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2020-04-21. The breach occurred during 9/7/2019 - 3/20/2020. The breach was discovered on 3/20/2020. 54,100 individuals were affected. Notice was sent on 4/20/2020.
- South Carolina State AGas victim2020-04-21
Volusion, LLC reported a data incident where malware on its e-commerce platform exposed customer personal information (names, addresses, credit card numbers, CVVs) between Sept 7 and Oct 8, 2019. Volusion detected the incident on Oct 8, 2019, removed the malware, notified the FBI, and engaged forensic experts. The incident was contained and internal procedures were updated.
- Montana State AGas victim2020-04-20
Volusion, LLC notified Montana AG of a data incident where malware on its e-commerce platform exposed customer PII (names, addresses, credit card numbers, CVVs) between Sept 7 and Oct 8, 2019. Volusion secured the platform, removed malware, notified the FBI, and hired forensic experts. Investigation confirmed exposure on March 20, 2020.
- Massachusetts State AGas victim2020-04-20
Volusion LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-04-20. 11,673 Massachusetts residents were affected. The report records the breach type as electronic.
- Hawaii State AGas victim2020-04-20
Volusion, LLC notified Hawaii of a data incident where malware on its e-commerce platform exposed customer PII (names, addresses, credit card numbers, CVV) between Sept 7 and Oct 8, 2019. Volusion discovered the incident on Oct 8, 2019, removed the malware, notified the FBI, and engaged forensic experts. Volusion updated internal procedures and added safeguards.
- Delaware State AGas victim2020-04-20
Volusion, LLC notified affected individuals of a data incident where malware on its e-commerce platform exposed customer personal and financial information (names, addresses, credit card numbers, CVVs) between Sept 7 and Oct 8, 2019. Volusion discovered the incident on Oct 8, 2019, secured the platform, removed malware, notified the FBI, and engaged forensic experts.
- Indiana State AGas victim2020-04-20
Volusion LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2019-09-07 and was reported on 2020-04-20. 7,914 Indiana residents were affected. 541,000 individuals affected in total.
- California State AGas victim2020-04-20
Volusion LLC reported a data security breach to the California Attorney General. The incident occurred on September 7, 2019. The provided source document contains only the filing metadata and an empty attachment placeholder; no narrative details regarding data types, affected counts, or attack vectors are available in the text.
- Washington State AGas victim2020-04-20
Volusion, LLC reported a malware incident affecting Washington residents. Unauthorized access occurred between Sept 7 and Oct 8, 2019, exposing customer PII and payment data (names, addresses, credit card numbers, CVVs). Volusion detected the incident on Oct 8, 2019, engaged forensic experts, notified the FBI, and removed the malware. Approximately 14,111 Washington residents were affected. Notices were sent in April 2020.
- Illinois State AGas victim2020-01-01
VOLUSION, LLC filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-178). The register records the breach as discovered on October 8, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.