Avalara

Disclosed Jun 6, 20197 years ago1,251 affectedConfirmed

Official notice

What is known

People affected	1,251 (as reported by the organization)
Disclosed	Jun 6, 2019
Happened	May 22, 2019
Attack	Not stated
Data exposed	Not stated
Sector	Tech · US
Status	Confirmed

Sources

Source	Kind
California Attorney General breach notice: Avalaraoag.ca.gov · Official notice	Official notice
Indiana Attorney General 2019 data breach report: Avalarain.gov · Official notice	Official notice

Notices filed

Where	Filed	People
Indiana AGresidents of IN	Jun 6, 2019	1
California AGresidents of CA	Jun 7, 2019

Other breaches at Avalara

Breach	Disclosed	Attack	Sector	Status	Affected
Avalara Salesforce data stolen via Salesloft Drift OAuth tokensSep 12, 20251 year agoSupply chain	Sep 12, 20251 year ago	Supply chain	Tech	Confirmed	Unknown

History of this record

2026-09-25 · sector: other to tech · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 1251 · backfill source
2026-09-25 · disclosed: 2019-06-07 to 2019-06-06 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Avalara

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.