Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: Carvana Co.
  • Street Address: 300 E. Rio Salado Pkwy
  • City: Tempe
  • State, or Country if outside the US: AZ
  • Zip Code: 85281

Submitted By

  • Name: Elliot Golding
  • Title: Partner
  • Firm name (if different than entity): McDermott Will & Emery
  • Telephone Number: (202) 756-8158
  • Email Address: egolding@mwe.com
  • Relationship to entity whose information was compromised: Outside Counsel

Breach Information

  • Total number of persons affected (including residents): 1799
  • Total number of Maine residents affected: 4
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: July 05, 2024
  • Date Breach Discovered: July 23, 2024
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with:

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: September 12, 2024
  • Copy of notice to affected Maine residents: 2024-09-12_-_Carvana_-Template_Individual_Notification_Letters.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: Carvana is offering identity protection services through IDX, a ZeroFox company. IDX identity protection services include: 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy and fully managed ID theft recovery services, if needed.