Sovos Compliance, LLC

Sovos Compliance, LLC reported that unauthorized actors exploited a previously unknown vulnerability (zero-day) in Progress Software's MOVEit Transfer application on May 30, 2023, to download personal information. Sovos detected the incident on May 31, 2023, took the application offline, retained cybersecurity experts, and notified law enforcement. Affected individuals are offered two years of identity monitoring.

Sovos Compliance, LLC notified consumers that unauthorized actors exploited a previously unknown vulnerability in MOVEit Transfer on May 30, 2023, to download personal information. Sovos took the application offline, engaged cybersecurity experts, and notified law enforcement. Two years of complimentary identity monitoring services were offered to affected individuals.

Sovos Compliance, LLC disclosed a security event involving the MOVEit Transfer application vulnerability discovered on May 31, 2023. Unauthorized actors exploited the vulnerability to download personal information of individuals associated with unclaimed property claims. Sovos took the application offline, retained cybersecurity experts, notified law enforcement, and is offering two years of complimentary credit monitoring and identity restoration services through Kroll.

Sovos Compliance LLC reported an external system breach (hacking) occurring between May 27 and May 30, 2023, discovered on June 12, 2023. The incident affected 18,513 individuals, including 52 Maine residents. Acquired data included names and Social Security Numbers. Notification was sent on July 12, 2023, offering 24 months of Kroll identity monitoring services.

Affected (this filing): 18,513

Sovos Compliance, LLC notified the California AG of a security event where unauthorized actors exploited a previously unknown vulnerability in Progress Software's MOVEit Transfer application. The breach occurred between May 27 and May 30, 2023, and was discovered on May 31, 2023. Personal information, including names and potentially Social Security numbers, was exfiltrated. Sovos took the application offline, engaged forensic experts, notified law enforcement, and offered two years of identity monitoring to affected individuals.

Sovos Compliance, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2023-08-07. The breach occurred on 5/30/2023. 189 Montana residents were affected.

Affected (this filing): 189

Sovos Compliance, LLC notified Vermont AG that unauthorized actors exploited a previously unknown vulnerability in Progress Software's MOVEit Transfer application on May 31, 2023. The incident involved the exfiltration of personal information, including names and government identifiers, from unclaimed property claim records. Sovos took the application offline, engaged forensic experts, notified law enforcement, and is offering two years of credit monitoring services to affected individuals.

Sovos Compliance LLC disclosed a security event involving the MOVEit Transfer application vulnerability discovered May 31, 2023. Unauthorized actors exploited the vulnerability to exfiltrate personal information, including government IDs and basic identity data. Sovos took the application offline, retained experts, notified law enforcement, and offers two years of credit monitoring via Kroll.

Sovos Compliance, LLC notified New Hampshire regulators of a security event involving the MOVEit Transfer application. On May 31, 2023, unauthorized actors exploited a previously unknown vulnerability in the software to download personal information. Sovos took the application offline, retained cybersecurity experts, and notified law enforcement. Affected individuals are offered two years of credit monitoring and identity restoration services.

Sovos Compliance LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-23. The breach occurred during 5/27/2023 - 5/30/2023. The breach was discovered on 7/20/2023. 215,114 individuals were affected. Notice was sent on 8/23/2023.

Affected (this filing): 215,114

Sovos Compliance LLC reported a data breach affecting Maine residents due to a software vulnerability. The breach, which occurred between May 27 and May 30, 2023, resulted in the compromise of names and driver's license or non-driver identification card numbers. The company discovered the incident on June 12, 2023, and began notifying affected individuals on August 23, 2023. Impacted individuals were offered 24 months of complimentary identity monitoring services through Kroll.

Affected (this filing): 66

Sovos Compliance, LLC, a finance sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2023-06-12 and filed notice on 2023-08-23. 11,103 Washington residents were affected. 72 days elapsed between awareness and notification. 16 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 11,103

Sovos Compliance LLC disclosed a security event involving the exploitation of a previously unknown vulnerability in Progress Software's MOVEit Transfer application. Unauthorized actors exploited this zero-day vulnerability to download files containing personal information of individuals associated with unclaimed property claims. The breach occurred on May 27, 2023, and was discovered on May 31, 2023. Sovos took the application offline, activated incident response procedures, retained cybersecurity experts, and notified law enforcement. Affected individuals are offered two years of credit monitoring and identity restoration services.

Sovos Compliance LLC, a financial services software provider, reported a data breach affecting 66 Maine residents and 215,114 individuals in total. The breach occurred between May 27 and May 30, 2023, due to a software vulnerability and was discovered by Sovos on June 12, 2023. The compromised data includes names and Social Security Numbers. Sovos is offering 24 months of complimentary identity monitoring and restoration services through Kroll.

Affected (this filing): 66

Sovos Compliance LLC notified the California Attorney General of a security event involving its MOVEit Transfer application. On May 31, 2023, Progress Software announced a previously unknown vulnerability in MOVEit. Unauthorized actors exploited this zero-day vulnerability to download files containing personal information of Sovos customers. The breach occurred on May 27, 2023. Sovos took the application offline, activated incident response, retained cybersecurity experts, and notified law enforcement. Affected individuals are offered two years of credit monitoring.

Sovos Compliance LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-09-22. The breach occurred during 5/27/2023 - 5/30/2023. The breach was discovered on 1/1/00017/20/2023. 181,507 individuals were affected. Notice was sent on 9/22/2023.

Affected (this filing): 181,507

Sovos Compliance, LLC notified Vermont AG that unauthorized actors exploited a previously unknown vulnerability in Progress Software's MOVEit Transfer application to download personal information. Sovos took the application offline, engaged forensic experts, notified law enforcement, and offered two years of credit monitoring. The specific data elements are redacted in the template but include identity and government identifiers.

A third-party service provider, Sovos Compliance LLC, experienced a data breach due to a software vulnerability. The incident occurred between May 27 and May 30, 2023, and was discovered on June 12, 2023. The breach affected 31 Maine residents, compromising their names and driver's license or non-driver ID card numbers. Sovos is offering 24 months of identity monitoring services through Kroll to those affected.

Affected (this filing): 31

Sovos Compliance, LLC, a finance sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2023-06-12 and filed notice on 2023-09-22. 1,450 Washington residents were affected. 102 days elapsed between awareness and notification. 16 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 1,450

Sovos Compliance, LLC. filed a supplemental notice with the New Hampshire Attorney General's office on September 22, 2023, regarding 59 additional NH residents affected by a MOVEit Transfer vulnerability exploit. The incident occurred on May 30, 2023, when unauthorized actors exploited a previously unknown vulnerability to exfiltrate personal information. Sovos took the application offline, retained advisors, and notified law enforcement. Affected data includes personal information; victims are offered two years of credit monitoring.

Affected (this filing): 59