Social EngineeringPhishingStolen CredentialsData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Ancora Holdings, LLC
bd_9ea18146109df926 · schema v1 · pii pii-v1
Full breach record for Ancora Holdings, LLC →Ancora Holdings Group, LLC notified the NH AG of a data security incident. On June 2, 2025, the company detected suspicious activity in an employee email account, likely due to phishing. An unauthorized individual accessed emails containing names, addresses, SSNs, and financial account info. 4 NH residents were notified on Sept 12, 2025. The company engaged forensic investigators, reset passwords, and offered credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_88455e584e8cec7cVermont State AGfiled 2025-09-12(10d gap)Candidate
- bd_d80edf90968f49f8Indiana State AGfiled 2025-09-12(10d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/ancora-holdings-20250922.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2025
- Raw hash
- 9e6d7403d449986e3e6344df0a742c1bb92991e701784ecb8d776f4972cd63ec
Reporting entity
- Name
- CLARK HILL PLCnorm: clark hill
Victim entity
- Name
- Ancora Holdings, LLCnorm: ancora holdings
Incident
- Discovered
- Jun 2, 2025
- Materiality determined
- —
- Notification sent
- Sep 12, 2025
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Department of Justice
- Initial access
- phishing_link
Compliance
- Time to disclose
- 16 weeks(112 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.