HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
ON Q FINANCIAL, LLC
bd_48330967f1459ecf · schema v1 · pii pii-v1
Full breach record for ON Q FINANCIAL, LLC →On Q Financial, LLC notified clients of a data security incident involving a vulnerability in ConnectWise ScreenConnect. The vulnerability allowed an unknown individual to access the network and exfiltrate client names and Social Security numbers. On Q Financial patched the vulnerability, engaged forensic investigators, reported the incident to the FBI, and provided 12 months of credit monitoring services to affected clients.
Leak gap clock⏱ Leak >30d13 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
A leak claim by bianlian about this victim predates this filing by 38 days.View originating leak claim
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2024/04/Sample-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 29, 2024
- Raw hash
- 0138d3bad9dca3c94918f2034e97a4a3191f0fde4cae395fd28a837fc1c6fd25
Reporting entity
- Name
- ON Q FINANCIAL, LLCnorm: on q financial
- Domain
- onqfinancial.com
Victim entity
- Name
- ON Q FINANCIAL, LLCnorm: on q financial
- Domain
- onqfinancial.com
Incident
- Discovered
- Mar 14, 2023
- Materiality determined
- —
- Notification sent
- Mar 29, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this incident to the FBI
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(381 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.