DisclosureLens
HackingCustomer Data InvolvedIdentity (basic)Financial accountMedium

Anders Group, LLC

bd_080c1ba28fa03eca · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 24, 2024

Filed

May 15, 2024

To disclose

21 days

Affected · nationwide

2,66015 in this filing

Linked

8 filings

Confidence

75%
Full breach record for Anders Group, LLC

Anders Group, LLC, a commercial entity, experienced an external system breach on March 30, 2024, which was subsequently discovered on April 24, 2024. The incident affected 2,660 individuals in total, including 15 residents of Maine. The compromised information includes names or other personal identifiers in combination with financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. The company issued written notifications to the affected Maine residents on May 15, 2024, and offered identity theft protection services.

Maine clockDiscovered Apr 24, 2024Filed with AG May 15, 202421d ME AG ≤30d21 days discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 25 days
discovery → filing · 21 days

Mar 30, 2024

Begins

Apr 24, 2024

Discovered

May 15, 2024

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Show 2 more filingsup to 72d gap

Filing propagation · 7 filings · 5 states

View merged incident ↗
Massachusetts State AGMay 15 · first
Indiana State AGMay 15 · first
Montana State AGMay 15 · first
New Hampshire State AGMay 15 · first
Maine State AGMay 15 · first · this page

Pattern: first filing May 15 (MA), last Jul 26 (ME) — a 72-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.