HackingTechnologyInformationDelayed DiscoveryIdentity (basic)PIILowContained

ANKA

bd_15019ec1bc93626b · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 1, 2025

Filed

Jan 16, 2026

To disclose

11 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for ANKA →

GSPlatformCo (operating as ANKA) notified Vermont AG of unauthorized access to a third-party system hosting customer data. The exposed data consisted of basic profile details (name, contact info, demographics), account status, and transaction history from an April 2025 snapshot. No passwords, payment data, or authentication tokens were compromised. ANKA launched an investigation, hardened its environment, and notified authorities.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday11 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 214 days

discovery → filing · 11 weeks / 76 days

Apr 1, 2025

Begins

Nov 1, 2025

Discovered

Jan 16, 2026

Filed

vs. sector median

8 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_4ed66e6c4f37d2eb2026-01-12 · +4dVerified
Washington State AGbd_9fb38cf7fb0930472026-01-12 · +4dVerified
Maine State AGbd_ae32ca57c4e89aef2026-01-12 · +4dVerified
New Hampshire State AGbd_e571e074be5ee9422026-01-12 · +4dVerified

Show 2 more filings ↓up to 15d gap

Indiana State AGbd_731ce90868a6c3cf2026-01-11 · +5dCandidate
Oregon State AGbd_50c0e0a87c4629ea2026-01-31 · +15dVerified by operator

Name: GSPlatformCo Inc
norm: gsplatformco
Domain: anka.africa

Name: ANKA
norm: anka
Industry: Technologyllm

Discovered: Nov 1, 2025
Breach occurred: Apr 1, 2025 – Apr 30, 2025
Undetected for: 214 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 16, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: notified the relevant data protection authorities
Initial access: exploit_public_facing

During the incident: Launched a security investigation
Fully hardened our environment against any additional exposure
Notified the relevant data protection authorities
Enhancing our security controls to prevent a recurrence
Changes made: Fully hardened our environment against any additional exposure
Enhancing our security controls to prevent a recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGJan 11 · first

California State AG+1d

Washington State AG+1d

Maine State AG+1d

New Hampshire State AG+1d

Vermont State AG+5d · this page

Oregon State AG+20d

Pattern: first filing Jan 11 (IN), last Jan 31 (OR) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2026-01-16-gsplatformco-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 16, 2026
Raw hash: eb0d4e2341e6d7b81da72d12d02d39fe1bccda0b8448195031aefc825e8b3e7d

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityGSPlatformCo Inc

Victim entityANKA

Incidentdiscovered Nov 1, 2025

Stated responseLaunched a security investigation

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov