Avient Corporation

On or around April 9, 2023, Avient Corporation suffered a cybersecurity incident that compromised personal information stored on its servers. The breach was reported by the Vermont Office of the Attorney General on August 22, 2023, though the exact nature of the exposed data such as whether it included financial records, employee details, or customer information was not publicly disclosed. The incident suggests unauthorized access to sensitive systems, potentially exposing individuals to risks like identity theft or fraud. While the full scope remains unclear, the involvement of a state attorney general’s office indicates a significant data protection failure, raising concerns over Avient’s cybersecurity measures and the potential long-term repercussions for affected parties. The delay in disclosure (over four months) may further exacerbate reputational and regulatory risks for the company.

Source: https://ago.vermont.gov/document/2023-08-22-avient-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/avient-corporation

"id": "avi959091725",
"linkid": "avient-corporation",
"type": "Breach",
"date": "4/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'name': 'Avient Corporation'}],
 'data_breach': {'personally_identifiable_information': True,
                 'type_of_data_compromised': 'personal information'},
 'date_detected': '2023-04-09',
 'date_publicly_disclosed': '2023-08-22',
 'description': 'On August 22, 2023, the Vermont Office of the Attorney '
                'General reported that Avient Corporation experienced a '
                'cybersecurity incident on or around April 9, 2023, affecting '
                'personal information stored on impacted servers. The specific '
                'types of compromised information remain unspecified.',
 'impact': {'data_compromised': True},
 'references': [{'date_accessed': '2023-08-22',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'title': 'Avient Corporation Cybersecurity Incident'}