Social EngineeringPhishingStolen CredentialsDelayed DiscoveryIDENTITY_BASICCREDENTIALSLowContained
One Stop Financial Services LLC
bd_5ac2cf45e3f27494 · schema v1 · pii pii-v1
Full breach record for One Stop Financial Services LLC →One Stop Financial Services notified Vermont AG of unauthorized access to an email account on Sept 14, 2022. Investigation confirmed sensitive info (name, credentials) was likely accessed. One Stop implemented security safeguards and offered 24 months of credit monitoring. No specific count of affected individuals was disclosed.
Vermont clock✗ VT AG >45 bday16 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-01-10-one-stop-financial-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2024
- Raw hash
- 26d02430a6ba2b8ec7690bc8052b12aac931f491db8ffaf85dbac79b8fbe1c89
Reporting entity
- Name
- One Stop Financial Services LLCnorm: one stop financial
Victim entity
- Name
- One Stop Financial Services LLCnorm: one stop financial
Incident
- Discovered
- Sep 14, 2022
- Materiality determined
- —
- Notification sent
- Jan 10, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 16 months(483 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.