Charlotte-based AvidXchange cybersecurity attack exposes financial information – WSOC TV
CHARLOTTE — About 7,000 customers on Friday received a letter from Charlotte-based AvidXchange notifying them that their financial account information may have been compromised in a cybersecurity attack that began in March.
The Maine Attorney General’s Office released information about the data breach, stating that the data breach occurred on March 2, 2023.
[ READ RELATED: Former Wells Fargo executive avoids prison time over fake-accounts scandal ]
AvidXchange said in a letter to customers dated Oct. 13 that it detected the issue in early April during routine security monitoring protocols.
Bank account information for thousands of customers may have been exposed in May, according to a statement posted on the company’s website on June 15. The investigation continued over the next several months and affected customers were contacted.
The letter states that while there was no indication of identity theft or fraud, the dataset “contained sensitive information from our files, including personal information.”
A data breach notification from the Maine Attorney General’s Office states that financial account numbers or credit/debit card information was obtained in combination with PINs and passcodes.
AvidXchange provided identity theft prevention services to those affected and detailed how consumers can protect their personal information.
- Reset all company-wide passwords (service account and teammate passwords).
- Implement additional logging and process restrictions such as two-factor authentication.
- Add additional Conditional Access policies to ensure logins from known and trusted sources
- Establishing separate cloud-based user accounts
North Carolina residents can call the North Carolina Attorney General’s Office at 1-919-716-6400 with questions regarding data breaches or identity theft.
AvidXchange said customers affected by the data breach have been notified.
Channel 9 has reached out to AvidXchange for a statement.
(clock: How criminals use common security features to access bank accountss)
This browser does not support the video element.
