Social EngineeringPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Ancora Holdings, LLC
bd_88455e584e8cec7c · schema v1 · pii pii-v1
Full breach record for Ancora Holdings, LLC →Ancora Holdings Group, LLC notified Vermont AG of a June 2025 incident where an employee's email account was compromised via suspicious activity (likely phishing). Unauthorized access potentially exposed names, addresses, SSNs, and financial account information. The company engaged forensic investigators, secured the account, and is offering 24 months of identity theft protection through IDX.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d80edf90968f49f8Indiana State AGfiled 2025-09-12Verified
- bd_9ea18146109df926New Hampshire State AGfiled 2025-09-22(10d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-12-ancora-holdings-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 12, 2025
- Raw hash
- 26d6c377fa922c22364101257c7059da45add70d0e73bb7cd65a4b3fc838a755
Reporting entity
- Name
- Ancora Holdings, LLCnorm: ancora holdings
Victim entity
- Name
- Ancora Holdings, LLCnorm: ancora holdings
Incident
- Discovered
- Jun 2, 2025
- Materiality determined
- Sep 12, 2025
- Notification sent
- Sep 12, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 weeks(102 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.