HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)CredentialsLowContained

One Point HR Solutions, Inc.

bd_546c83680572c529 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 5, 2024

To disclose

—

Affected

Not disclosed

Linked

9 filings

Confidence

66%

Full breach record for One Point HR Solutions, Inc. →

One Point HR Solutions, Inc. notified consumers that an unknown unauthorized actor gained access to certain email accounts between July 3, 2023, and February 14, 2024. The company engaged forensic specialists and law enforcement. While there is no evidence of actual misuse, personal information may have been accessed. The company is offering credit monitoring and has implemented additional security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 3, 2023

Begins

Sep 5, 2024

Filed

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_0f6b372b3dd4d5fb2024-09-06 · +1dVerified
New Hampshire State AGbd_20065c46365befff2024-09-06 · +1dVerified
Massachusetts State AGbd_4b9d31a193998e4f2024-09-06 · +1dVerified
Montana State AGbd_668b3a3ee358d4392024-09-06 · +1dCandidate

Show 4 more filings ↓up to 36d gap

Indiana State AGbd_9c03bb465078bfc42024-09-06 · +1dVerified
Illinois State AGbd_cdfa4b85eda4e9312024-09-01 · +4dVerified
New Hampshire State AGbd_0086cc962bc729a62024-10-11 · +36dVerified
Maine State AGbd_c44fb15ebe89684a2024-10-11 · +36dVerified

Name: One Point HR Solutions, Inc.
norm: one point hr
Domain: onepointhrs.com

Name: One Point HR Solutions, Inc.
norm: one point hr
Domain: onepointhrs.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Jul 3, 2023 – Feb 14, 2024
Materiality determined: —
Notification sent: Sep 6, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Reported the event to federal and local law enforcement

During the incident: Launched an internal investigation
Engaged third-party forensic and data privacy specialists
Reported the event to federal and local law enforcement
Cooperating with law enforcement investigations
Reviewing existing security policies
Implemented additional cybersecurity measures
Reinforced with staff the importance of safeguarding information
Offering credit monitoring and identity theft protection services
Changes made: Implemented additional cybersecurity measures
Reviewing existing security policies
Reinforced with staff the importance of safeguarding information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Illinois State AGSep 1 · first

Vermont State AG+4d · this page

Maine State AG+5d

New Hampshire State AG+5d

Massachusetts State AG+5d

Montana State AG+5d

Indiana State AG+5d

New Hampshire State AG+40d

Maine State AG+40d

Pattern: first filing Sep 1 (IL), last Oct 11 (ME) — a 40-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-09-05-one-point-hr-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2024
Raw hash: 6f4e88f1f156a182aa386892b3da65010f241c031a36566a0818eb3be3c31136

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityOne Point HR Solutions, Inc.

Victim entityOne Point HR Solutions, Inc.

IncidentUnauthorized Access

Stated responseLaunched an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov