MalwareRansomwareData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Outsourcing Center
bd_408daf283b4aa0d6 · schema v1 · pii pii-v1
Full breach record for Outsourcing Center →Convergent Outsourcing, Inc. experienced a ransomware attack on June 17, 2022, where an external actor gained unauthorized access and deployed malware. Data extraction tools were used on an internal storage drive, potentially exposing names, contact info, financial account numbers, and SSNs for some individuals. The company contained the incident, reset passwords, engaged third-party experts, and offered 12 months of credit monitoring.
California clockDiscovered Jun 17, 2022 → Notified Oct 26, 2022131d ✗ CA 60-day late20 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_68ececae1b10f25dNew Hampshire State AGfiled 2022-11-01Verified
- bd_7dfa3edfec606122Maine State AGfiled 2022-11-01Verified
- bd_fd02da83dfcf0822Delaware State AGfiled 2022-10-26(6d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-558788
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 1, 2022
- Raw hash
- 91ac7302c8983b49feb22acf24a6527330417e87113624c9db4bfedfcc771ecd
Reporting entity
- Name
- Outsourcing Centernorm: outsourcing center
- Domain
- outsourcing-center.com
Victim entity
- Name
- Outsourcing Centernorm: outsourcing center
- Domain
- outsourcing-center.com
Incident
- Discovered
- Jun 17, 2022
- Materiality determined
- —
- Notification sent
- Oct 26, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 20 weeks(137 days from discovery to filing)
- Compliance flags
- CA 60-day late · 131d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 17, 2022→ Notified: Oct 26, 2022131d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.