HackingDelayed DiscoveryIDENTITY_BASICPIILowContained
ANKA
bd_15019ec1bc93626b · schema v1 · pii pii-v1
Full breach record for ANKA →GSPlatformCo (operating as ANKA) notified Vermont AG of unauthorized access to a third-party system hosting customer data. The exposed data consisted of basic profile details (name, contact info, demographics), account status, and transaction history from an April 2025 snapshot. No passwords, payment data, or authentication tokens were compromised. ANKA launched an investigation, hardened its environment, and notified authorities.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-01-16-gsplatformco-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 16, 2026
- Raw hash
- eb0d4e2341e6d7b81da72d12d02d39fe1bccda0b8448195031aefc825e8b3e7d
Reporting entity
- Name
- GSPlatformCo Incnorm: gsplatformco
- Domain
- anka.africa
Victim entity
- Name
- ANKAnorm: anka
Incident
- Discovered
- Nov 1, 2025
- Materiality determined
- —
- Notification sent
- Jan 16, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- notified the relevant data protection authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.