HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)TargetedIdentity (basic)PIIMediumContained

ANDERSON BANCSHARES, INC.

bd_6cbf687a46d34fec · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 28, 2025

Filed

Dec 5, 2025

To disclose

5 weeks

Affected

3,079state residents only

Linked

4 filings

Confidence

65%

Full breach record for ANDERSON BANCSHARES, INC. →

Anderson Bancshares, Inc. d/b/a Anderson Brothers Bank notified South Carolina consumers of a third-party data breach involving vendor Marquis. An unauthorized third party accessed Marquis systems starting August 14, 2025, obtaining customer names and other personal information. The bank is offering credit monitoring and has engaged external cybersecurity specialists.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due5 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 75 days

discovery → filing · 5 weeks / 38 days

Aug 14, 2025

Begins

Oct 28, 2025

Discovered

Dec 5, 2025

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_7d1a3369b0cf03d92025-12-05Verified
Massachusetts State AGbd_b50955c26aa00f1e2025-12-05Verified
Maine State AGbd_bea06e7fae8a61b82025-12-05Candidate

Name: ANDERSON BANCSHARES, INC.
norm: anderson bancshares
Industry: financial_services

Name: ANDERSON BANCSHARES, INC.
norm: anderson bancshares
Industry: financial_services
Also named: Anderson Bancshares, Inc.dba oflegal entity
Anderson Brothers Bankdba oftrade name
Industry: Financial Servicesllm

Discovered: Oct 28, 2025
Breach occurred: Aug 14, 2025
Undetected for: 75 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3,079state-resident count only
Data types: Identity (basic)PII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: notifying applicable authorities, as required by law
Third party: via Marquis

During the incident: Marquis initiated its critical incident response process and took steps to secure the impacted systems
Marquis began an investigation and engaged external cybersecurity specialists to help
Notifying applicable authorities, as required by law
Offering complimentary Credit Monitoring through Epiq
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(38 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGDec 5 · first

Massachusetts State AGDec 5 · first

Maine State AGDec 5 · first

South Carolina State AGDec 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/Consumer%20Letter%20-%20%20Anderson%20Bancshares%2C%20Inc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 5, 2025
Raw hash: fb8522e1dc42e8d31a71640b3b9b6ddfe7da7957afe20099417b224c6aa8c19f

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityANDERSON BANCSHARES, INC.

Victim entityANDERSON BANCSHARES, INC.

Incidentdiscovered Oct 28, 2025

Stated responseMarquis initiated its critical incident response process and took steps to secure the impacted systems

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov