Onset Data Breach Exposes Sensitive Personal Information
Onset recently disclosed a potential security incident to the Massachusetts Attorney General, revealing that sensitive personal identifiable information (PII) under its protection may have been compromised. The breach notice, filed without details on the nature of the attack, indicates that exposed data could include names, Social Security numbers, financial account information, driver’s license details, and credit/debit card numbers—though the exact impact varies by individual.
On December 12, 2025, Onset began notifying affected individuals via mail, providing them with specifics on the compromised data and offering 24 months of complimentary credit monitoring services. The breach notice submitted to Massachusetts authorities is available for review. The full scope of the incident and its root cause remain undisclosed.
Source: https://straussborrelli.com/2025/12/17/onset-financial-data-breach-investigation/
Onset LLC cybersecurity rating report: https://www.rankiteo.com/company/onset-llc
"id": "ONS1765987159",
"linkid": "onset-llc",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Unknown',
'location': 'Massachusetts, USA',
'name': 'Onset',
'type': 'Company'}],
'customer_advisories': '24 months of complimentary credit monitoring services '
'offered to affected individuals',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Social Security number',
'Financial account information',
'Driver’s license information',
'Credit/debit numbers']},
'date_publicly_disclosed': '2025-12-12',
'description': 'Onset reported a potential compromise of sensitive personal '
'identifiable information in its systems. The breach notice '
'does not elaborate on the nature of the security incident but '
'confirms exposure of various types of personal and financial '
'data.',
'impact': {'data_compromised': 'Sensitive personal identifiable information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'references': [{'source': 'Attorney General of the Commonwealth of '
'Massachusetts'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to the '
'Attorney General of '
'the Commonwealth of '
'Massachusetts'},
'response': {'communication_strategy': 'Data breach notification letters '
'mailed to impacted individuals'},
'title': 'Onset Data Breach',
'type': 'Data Breach'}