HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

SinglePoint Outsourcing, Inc.

bd_ac0a5785760e6fc1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 30, 2023

Filed

Feb 12, 2024

To disclose

11 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

65%

Full breach record for SinglePoint Outsourcing, Inc. →

SinglePoint Outsourcing notified consumers of a data breach where an unauthorized individual acquired files containing names, SSNs, DOBs, driver's license numbers, and bank account information between Nov 8-9, 2023. Incident discovered Nov 30, 2023. SinglePoint engaged forensic specialists, reset passwords, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday11 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 22 days

discovery → filing · 11 weeks / 74 days

Nov 8, 2023

Begins

Nov 30, 2023

Discovered

Feb 12, 2024

Filed

vs. sector median

7 wks faster

This filing is one of 8 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 75 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_5f14395a0e1f06bd2023-11-28 · +75dVerified by operator

Regulatory filings (6) · sorted by filing gap

California State AGbd_0114d256c2e310c22024-02-08 · +4dVerified by operator
Montana State AGbd_808adf8a87ff022b2024-02-08 · +4dVerified by operator
Indiana State AGbd_e638f4eeb783a5632024-02-08 · +4dVerified by operator
California State AGbd_772b7a9e530ef2302024-03-26 · +43dVerified

Show 2 more filings ↓up to 60d gap

California State AGbd_316cd5a987b7761a2024-04-12 · +60dVerified
Maine State AGbd_aa174434f1a613e22024-04-12 · +60dVerified

Name: SinglePoint Outsourcing, Inc.
norm: singlepoint outsourcing
Domain: single-point.com

Name: SinglePoint Outsourcing, Inc.
norm: singlepoint outsourcing
Domain: single-point.com
Industry: Professional Servicesllm

Discovered: Nov 30, 2023
Breach occurred: Nov 8, 2023 – Nov 9, 2023
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 28, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged third-party forensic specialists
Reset passwords
Secured all accounts
Conducted a full investigation
Offering 12 months of credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards
24/7 System monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(74 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

California State AGFeb 8 · first

Montana State AGFeb 8 · first

Indiana State AGFeb 8 · first

Vermont State AG+4d · this page

California State AG+47d

California State AG+64d

Maine State AG+64d

Pattern: first filing Feb 8 (CA), last Apr 12 (ME) — a 64-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-02-12-singlepoint-outsourcing-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 12, 2024
Raw hash: dc5f49bd817bdc3da832908b54cdfd9ce19fa5609441c5fea30cb9268056349c

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entitySinglePoint Outsourcing, Inc.

Victim entitySinglePoint Outsourcing, Inc.

Incidentdiscovered Nov 30, 2023

Stated responseEngaged third-party forensic specialists

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov