HackingDelayed DiscoveryIDENTITY_BASICLowContained
Ahtna Incorporated
bd_90c6835deaec4751 · schema v1 · pii pii-v1
Full breach record for Ahtna Incorporated →Ahtna, Inc. notified consumers of a data breach where an unauthorized third party accessed systems between April 20 and June 1, 2025. The incident involved personal information including names. Ahtna contained the network, engaged outside professionals for investigation, and is offering 12 months of credit monitoring. The incident was discovered on July 28, 2025.
Vermont clock✗ VT AG >45 bday17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 116 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_12ccee8c9159108cCalifornia State AGfiled 2025-11-21Verified
- bd_2ff3c11d1751fbb2Maine State AGfiled 2025-11-21Candidate
- bd_31c06274ced5bd37Indiana State AGfiled 2025-11-21Verified
- bd_f23a1a2a204c96b5New Hampshire State AGfiled 2025-11-21Verified
Show 2 more filings ↓Show fewer ↑up to 91d gap
- bd_11bf1ab7ad30a689California State AGfiled 2026-01-20(60d gap)Verified
- bd_4e509ebc850ec1d9Texas State AGfiled 2026-02-20(91d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-11-21-ahtna-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 21, 2025
- Raw hash
- 96990a2c9a27253fdd654639de9a2fb8e6dd1acc9cccf0ee4e02d23eda307f24
Reporting entity
- Name
- Ahtna Incorporatednorm: ahtna
- Domain
- ahtna.com
Victim entity
- Name
- Ahtna Incorporatednorm: ahtna
- Domain
- ahtna.com
Incident
- Discovered
- Jul 28, 2025
- Materiality determined
- Nov 21, 2025
- Notification sent
- Nov 21, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(116 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.