CPS Solutions, LLC

The Vermont Attorney General's Office reported a data breach involving CPS Solutions, LLC on May 14, 2025. The breach occurred between December 2 and 4, 2024, when an unauthorized third party accessed an employee's O365 business email account, potentially compromising personal information such as names, dates of birth, addresses, and health insurance information. The number of individuals affected is currently unknown.

Source: https://ago.vermont.gov/document/2025-05-14-cps-solutions-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/cps

"id": "cps857072525",
"linkid": "cps",
"type": "Breach",
"date": "6/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'name': 'CPS Solutions, LLC', 'type': 'Company'}],
 'attack_vector': 'Unauthorized access to O365 business email account',
 'data_breach': {'personally_identifiable_information': ['names',
                                                         'dates of birth',
                                                         'addresses'],
                 'type_of_data_compromised': ['names',
                                              'dates of birth',
                                              'addresses',
                                              'health insurance information']},
 'date_detected': '2025-05-14',
 'date_publicly_disclosed': '2025-05-14',
 'description': "The Vermont Attorney General's Office reported a data breach "
                'involving CPS Solutions, LLC on May 14, 2025. The breach '
                'occurred between December 2 and 4, 2024, when an unauthorized '
                "third party accessed an employee's O365 business email "
                'account, potentially compromising personal information such '
                'as names, dates of birth, addresses, and health insurance '
                'information. The number of individuals affected is currently '
                'unknown.',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 'addresses',
                                 'health insurance information'],
            'systems_affected': ['O365 business email account']},
 'initial_access_broker': {'entry_point': 'O365 business email account'},
 'references': [{'date_accessed': '2025-05-14',
                 'source': "Vermont Attorney General's Office"}],
 'threat_actor': 'Unauthorized third party',
 'title': 'Data Breach at CPS Solutions, LLC',
 'type': 'Data Breach'}