HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Complete Payroll Solutions
bd_f99beb53f694dace · schema v1 · pii pii-v1
Full breach record for Complete Payroll Solutions →Complete Payroll Solutions (CPS) disclosed that an unauthorized individual accessed its systems around March 10, 2024. The incident likely exposed names and government identifiers (SSN, DOB) of clients' employees. CPS reset passwords, engaged law enforcement, and offered Kroll identity monitoring. The filing is a Vermont AG submission dated April 25, 2025.
Vermont clock✗ VT AG >45 bday14 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by meow about this victim predates this filing by 241 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_b49242977c3bd20eIndiana State AGfiled 2025-04-25Verified
- bd_c06fe742fa395840New Hampshire State AGfiled 2025-04-25Verified
- bd_5fdc02e392c3d7f2New Hampshire State AGfiled 2025-05-28(33d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-25-complete-payroll-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 25, 2025
- Raw hash
- 84dc66802cb51c3759bbbb4c51738374f87ac7266e9bb451060223f388b74c63
Reporting entity
- Name
- Complete Payroll Solutionsnorm: complete payroll
- Domain
- completepayrollsolutions.com
Victim entity
- Name
- Complete Payroll Solutionsnorm: complete payroll
- Domain
- completepayrollsolutions.com
Incident
- Discovered
- Mar 10, 2024
- Materiality determined
- —
- Notification sent
- Apr 25, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 months(411 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.