Social EngineeringTechnologyInformationPhishingData ExfiltratedCustomer Data InvolvedTargetedGovernment IDIdentity (basic)MediumContained

Point5 Managed Services, LLC

bd_52dc913a7de572fb · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 25, 2025

To disclose

—

Affected

3state residents only

Linked

2 filings

Confidence

68%

Full breach record for Point5 Managed Services, LLC →

Point5 Managed Services, LLC notified the New Hampshire Attorney General of a data incident occurring on or about October 10, 2025. A phishing attack led to unauthorized access to the organization's Office 365 environment, resulting in the compromise of approximately 3 New Hampshire residents' personal information, including Social Security numbers and driver's license numbers. The company migrated to Google Workspace, rotated credentials, and implemented enhanced security measures including MFA. Affected individuals were notified and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 10, 2025

Begins

Nov 25, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_9085a0205b1f62be2025-11-21 · +4dCandidate

Name: Point5 Managed Services, LLC
norm: point5 managed
Domain: point5.net

Name: Point5 Managed Services, LLC
norm: point5 managed
Domain: point5.net
Industry: Technologyllm

Discovered: —
Breach occurred: Oct 10, 2025
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office (Consumer Protection Bureau)
Initial access: phishing_link

During the incident: Retained a third-party security firm to conduct a thorough investigation
Transitioned completely from O365 environment to Google Workspace
Updated DNS and mail exchange (MX) records
Rotated all organizational passwords
Implemented Single Sign-On (SSO), SCIM provisioning, and phish-resistant Multi-Factor Authentication (MFA)
Notified all affected users
Offered complimentary fraud protection and credit monitoring services for 24 months
Changes made: Reviewing and enacting enhanced security protocols
Reviewing and enacting disaster recovery plans
Reviewing and enacting business continuity plans
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGNov 21 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/point5-managed-services-20251125.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 25, 2025
Raw hash: 2450d1e053e01c08c5d2772f74f63239957dca08efe107ab566df57b2e202e37

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPoint5 Managed Services, LLC

Victim entityPoint5 Managed Services, LLC

IncidentPhishing

Stated responseRetained a third-party security firm to conduct a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov