Data Breach Notifications

Entity Information

  • Type of Organization: Financial Services
  • Entity Name: Sovos Compliance LLC
  • Street Address: 200 Ballardvale Street, Building 1, 4th Floor
  • City: Wilmington
  • State, or Country if outside the US: MA
  • Zip Code: 01887

Submitted By

  • Name: Joseph Santiesteban
  • Title: Partner
  • Firm name (if different than entity): Orrick, Herrington & Sutcliffe LLP
  • Telephone Number: 2068394352
  • Email Address: jsantiesteban@orrick.com
  • Relationship to entity whose information was compromised: Counsel

Breach Information

  • Total number of persons affected (including residents): 181507
  • Total number of Maine residents affected: 31
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: Yes
  • Date(s) Breach Occured: 05/27/2023-05/30/2023
  • Date Breach Discovered: Sovos discovered 06/12/2023; Sovos is a third-party service provider to the Exhibit A entities and provided them with access to information regarding the information of theirs that was impacted on July 20, 2023.
  • Description of the Breach:
    • Other
    • If other, please specify: Software bug/vulnerability
  • Information Acquired - Name or other personal identifier in combination with: Driver's License Number or Non-Driver Identification Card Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: Sovos anticipates notifying these individuals on behalf of the majority of Exhibit A entities beginning on September 22, 2023. For a small number of these Exhibit A entities, individual notices began on a different date.
  • Copy of notice to affected Maine residents: Individual Notice Template (Exhibit B).pdf
    Maine - Exhibit A.pdf
  • Date of any previous (within 12 months) breach notifications: 07/12/2023; 8/23/2023
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: Sovos is offering individuals 24 months of complimentary identity monitoring services, including credit monitoring and identity theft restoration services, through Kroll