HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Development Services Group, Inc.
bd_ca845ad330fb7dee · schema v1 · pii pii-v1
Full breach record for Development Services Group, Inc. →Development Services Group Inc. notified consumers of a data breach where an unauthorized actor acquired files from its network on September 22, 2025. The files contained names and other personal information. The company took systems offline, engaged cybersecurity specialists, notified federal law enforcement, and is offering 12 months of credit monitoring services.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 527 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6f73677778197ae6Leak Siteqilinfiled 2024-06-05(527d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_54d507479b18ee63Indiana State AGfiled 2025-11-14Verified
- bd_e5a39f06261cbaf0Maine State AGfiled 2025-11-12(2d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-11-14-development-services-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 14, 2025
- Raw hash
- 3dba598461b375f706f968c511b440ead6836992b1c996e5dc4d331a906d7ff3
Reporting entity
- Name
- Development Services Group, Inc.norm: development services
- Domain
- dsgonline.com
Victim entity
- Name
- Development Services Group, Inc.norm: development services
- Domain
- dsgonline.com
Incident
- Discovered
- Sep 7, 2025
- Materiality determined
- —
- Notification sent
- Nov 14, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.