Threat actor claims to have breached AVSL. The compromised data includes invoice IDs, client details, custom fields, version information, user IDs, UUIDs, first and last names, company names, email addresses, physical addresses, city, state, postal codes, country information, phone numbers, tax IDs, password hashes, IP addresses, billing details, account status, credit information, currency settings, login timestamps, and additional customer account information contained in an SQL database. NB:AVSL was previously breached on Tue Mar 24 2026