DisclosureLens
HackingFinancial ServicesFinanceDelayed DiscoveryData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

HENNESSY ADVISORS, INC.

bd_41991ab4574f8c98 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 30, 2025

Filed

Feb 24, 2026

To disclose

47 weeks

Affected · nationwide

12,64348 in this filing

Linked

9 filings

Confidence

66%
Full breach record for HENNESSY ADVISORS, INC.

Hennessy Advisors, Inc., an investment management firm, reported an external system breach on March 30, 2025. Unauthorized access occurred, resulting in the exfiltration of investor personal information. The breach was discovered on March 30, 2025, and notifications were sent on February 23, 2026. Approximately 12,643 individuals were affected, including 48 Maine residents. Identity theft protection services were offered.

Maine clockDiscovered Mar 30, 2025Filed with AG Feb 24, 2026331d ME AG >90d47 weeks discovery → filing
occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 47 weeks / 331 days

Mar 30, 2025

Begins

Mar 30, 2025

Discovered

Feb 24, 2026

Filed

vs. sector median

+39 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 23d gap

Filing propagation · 9 filings · 9 states

View merged incident ↗

Pattern: first filing Feb 1 (IL), last Feb 25 (TX) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.