In approximately December 2019, Avvo suffered a data breach incident that was published to an online hacking forum and was used in an extortion scam.
The data contained 4.1M unique email addresses alongside SHA-1 hashes, most likely representing user passwords.
Source: https://haveibeenpwned.com/PwnedWebsites#Avvo
TPRM report: https://scoringcyber.rankiteo.com/company/avvo
"id": "avv224324123",
"linkid": "avvo",
"type": "Data Leak",
"date": "12/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '4.1M',
'industry': 'Legal Services',
'name': 'Avvo',
'type': 'Company'}],
'data_breach': {'data_encryption': 'SHA-1 hashed',
'number_of_records_exposed': '4.1M',
'type_of_data_compromised': ['Email addresses',
'SHA-1 hashed passwords']},
'date_detected': 'December 2019',
'description': 'In approximately December 2019, Avvo suffered a data breach '
'incident that was published to an online hacking forum and '
'was used in an extortion scam. The data contained 4.1M unique '
'email addresses alongside SHA-1 hashes, most likely '
'representing user passwords.',
'impact': {'data_compromised': 'Email addresses, SHA-1 hashed passwords'},
'motivation': 'Extortion',
'title': 'Avvo Data Breach',
'type': 'Data Breach'}