HackingStolen CredentialsData ExfiltratedIDENTITY_BASICPIILowContained
SAX
bd_ce441aca74d4f237 · schema v1 · pii pii-v1
Full breach record for SAX →Sax LLP notified consumers of a security incident detected on August 7, 2024, involving unauthorized access to personal information. The firm engaged cybersecurity experts and notified the FBI. Notification letters were sent on December 1, 2025, offering credit monitoring. Affected data likely includes names and other PII.
Vermont clock✗ VT AG >45 bday17 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_03368ea6c198e1b3Montana State AGfiled 2025-12-22Verified
- bd_6b0331732b1d6680Maine State AGfiled 2025-12-22Verified
- bd_70f3b36fdd6d270fNew Hampshire State AGfiled 2025-12-22Verified
- bd_a57bf44b11d3263aCalifornia State AGfiled 2025-12-22Candidate
Show 4 more filings ↓Show fewer ↑up to 7d gap
- bd_db6dcf921571714aSouth Carolina State AGfiled 2025-12-23(1d gap)Verified
- bd_556c3ae504f7e82cDelaware State AGfiled 2025-12-16(6d gap)Verified
- bd_a0269a5e4239280fIndiana State AGfiled 2025-12-16(6d gap)Verified
- bd_1ef0f101196477a7Texas State AGfiled 2025-12-29(7d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-22-sax-llp-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2025
- Raw hash
- 8fcc28f74e8fbf341b7b8d6c8a8887cd4e5a004b472821214c1bbc94cf3ecd66
Reporting entity
- Name
- SAXnorm: sax
- Domain
- saxadvisorygroup.com
Victim entity
- Name
- SAXnorm: sax
- Domain
- saxadvisorygroup.com
Incident
- Discovered
- Aug 7, 2024
- Materiality determined
- —
- Notification sent
- Dec 1, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 months(502 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.