HackingCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Ancora Holdings, LLC

bd_88455e584e8cec7c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 2, 2025

Filed

Sep 12, 2025

To disclose

15 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

67%

Full breach record for Ancora Holdings, LLC →4 incidents on file

Ancora Holdings Group, LLC notified consumers of a data security incident involving unauthorized access to an employee's email account. The company detected suspicious activity on June 2, 2025, and determined on August 6, 2025, that an unauthorized individual may have accessed emails containing names, addresses, Social Security numbers, and financial account information. The company engaged a forensic firm, secured the account, and is offering 24 months of identity theft protection services.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday15 weeks discovery → filing

Incident timeline

discovery → filing · 15 weeks / 102 days

Jun 2, 2025

Discovered

Sep 12, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_d80edf90968f49f82025-09-12Verified
New Hampshire State AGbd_9ea18146109df9262025-09-22 · +10dVerified
Massachusetts State AGbd_337f9789ad7a5a8a2025-09-23 · +11dVerified

Name: Ancora Holdings, LLC
norm: ancora holdings

Name: Ancora Holdings, LLC
norm: ancora holdings

Discovered: Jun 2, 2025
Materiality determined: —
Notification sent: Sep 12, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Took steps to secure the account
Engaged a third-party forensic firm to assist in the investigation
Changes made: Implemented additional safeguards and technical security measures to further protect and monitor our systems
Offering identity theft protection services through IDX, which include: 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(102 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGSep 12 · first

Vermont State AGSep 12 · first · this page

New Hampshire State AG+10d

Massachusetts State AG+11d

Pattern: first filing Sep 12 (IN), last Sep 23 (MA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-09-12-ancora-holdings-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2025
Raw hash: 26d6c377fa922c22364101257c7059da45add70d0e73bb7cd65a4b3fc838a755

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAncora Holdings, LLC

Victim entityAncora Holdings, LLC

Incidentdiscovered Jun 2, 2025

Stated responseTook steps to secure the account

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov