AVIENT CORPORATION

Avient Corporation reported a cyber security incident occurring on April 9, 2023, involving disruption to IT systems and workstations, consistent with a ransomware attack. The company determined on July 6, 2023, that personal information (PII) was stored on impacted servers. Avient engaged forensic firms, restricted system access, reset passwords, implemented MFA, and offered 24 months of Kroll identity monitoring to affected individuals.

Avient Corporation notified Vermont AG of a cybersecurity incident discovered on April 9, 2023, involving unauthorized access to servers and workstations. The incident resulted in the exposure of personal information, including names and other PII. Avient engaged forensic investigators, restricted system access, reset passwords, implemented MFA, and offered two years of Kroll identity monitoring services to affected individuals.