HackingProfessional ServicesCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMedium

SinglePoint Outsourcing, Inc.

bd_aa174434f1a613e2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2024

Filed

Apr 12, 2024

To disclose

13 weeks

Affected · nationwide

11,0962 in this filing

Linked

8 filings

Confidence

50%

Full breach record for SinglePoint Outsourcing, Inc. →

SinglePoint Outsourcing, Inc. experienced an external system breach on November 8, 2023, which was discovered on January 11, 2024. The incident affected 2 Maine residents, compromising their names and financial account or credit/debit card numbers along with access codes. The company provided written notification to affected individuals starting on February 8, 2024, and offered 12 months of credit monitoring and identity protection services through IDX.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 11, 2024 → Filed with AG Apr 12, 202492d ✗ ME AG >90d13 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 64 days

discovery → filing · 13 weeks / 92 days

Nov 8, 2023

Begins

Jan 11, 2024

Discovered

Apr 12, 2024

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_5f14395a0e1f06bd2023-11-28 · +135dVerified by operator

Regulatory filings (6) · sorted by filing gap

California State AGbd_316cd5a987b7761a2024-04-12Verified
California State AGbd_772b7a9e530ef2302024-03-26 · +17dVerified
Vermont State AGbd_ac0a5785760e6fc12024-02-12 · +60dVerified
California State AGbd_0114d256c2e310c22024-02-08 · +64dVerified by operator

Show 2 more filings ↓up to 64d gap

Montana State AGbd_808adf8a87ff022b2024-02-08 · +64dVerified by operator
Indiana State AGbd_e638f4eeb783a5632024-02-08 · +64dVerified by operator

Name: SinglePoint Outsourcing, Inc.
norm: singlepoint outsourcing
Domain: single-point.com

Name: SinglePoint Outsourcing, Inc.
norm: singlepoint outsourcing
Domain: single-point.com

Discovered: Jan 11, 2024
Breach occurred: Nov 8, 2023
Undetected for: 64 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 8, 2024
Affected individuals: 11,096state + nationwide
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access

Changes made: Offered 12 months of credit monitoring and identity protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(92 days from discovery to filing)
Compliance flags: ME AG >90d · 92d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 11, 2024
→ Filed with AG: Apr 12, 2024
92d 90 days ME AG >90d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 11, 2024 → Filed with AG: Apr 12, 2024	92d	90 days	ME AG >90d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

California State AGFeb 8 · first

Montana State AGFeb 8 · first

Indiana State AGFeb 8 · first

Vermont State AG+4d

California State AG+47d

California State AG+64d

Maine State AG+64d · this page

Pattern: first filing Feb 8 (CA), last Apr 12 (ME) — a 64-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/60495931-49e4-4bda-a065-bc349be90bae.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2024
Raw hash: 48137beadf3500fecf2dd46bc0e12833e60fa470a8a6cd33f12c576ff64159f0

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entitySinglePoint Outsourcing, Inc.

Victim entitySinglePoint Outsourcing, Inc.

Incidentdiscovered Jan 11, 2024

Stated responseOffered 12 months of credit monitoring and identity protection services through IDX

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov