HackingFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIFINANCIALLowResolved
HENNESSY ADVISORS, INC.
bd_41991ab4574f8c98 · schema v1 · pii pii-v1
Full breach record for HENNESSY ADVISORS, INC. →Hennessy Advisors, Inc. (investment management) detected suspicious activity on 2025-03-30. Data including investor personal information was accessed and released without authorization; specific PII exposure confirmed 2026-02-05. 48 of 12,643 affected individuals are Maine residents. Notifications sent 2026-02-23. 12-month IDX identity protection offered.
Maine clockDiscovered Feb 5, 2026 → Filed with AG Feb 24, 202619d ✓ ME AG ≤30d19 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_072c9ab8534cfc81California State AGfiled 2026-02-24Verified
- bd_6d4e4e25f72021c3New Hampshire State AGfiled 2026-02-24Verified
- bd_4a3d6923a18d23b5Texas State AGfiled 2026-02-25(1d gap)Verified by operator
- bd_155d62cf97956468Indiana State AGfiled 2026-02-23(1d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_d11bdc8476440748Vermont State AGfiled 2026-02-23(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e7c69f03-e6e0-474a-b6e0-b9f26b728951.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 24, 2026
- Raw hash
- c0ab755c03379a9152a6358275a6a0997316b0011e3743df7de3102dbf583946
Reporting entity
- Name
- HENNESSY ADVISORS, INC.norm: hennessy advisors
- Domain
- hennessyadvisors.com
- Industry
- Financial Services
Victim entity
- Name
- HENNESSY ADVISORS, INC.norm: hennessy advisors
- Domain
- hennessyadvisors.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Feb 5, 2026
- Materiality determined
- —
- Notification sent
- Feb 23, 2026
- Affected individuals
- 48
- Data types
- PIIFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Maine Attorney General notified
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 19d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 5, 2026→ Filed with AG: Feb 24, 202619d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.