HackingTechnologyProfessional ServicesInformationPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainCredentialsFinancial accountHealth (basic)Identity (basic)Government IDPHIHighContained

Anker SOLIX

bd_e31e1cd18e93ddac · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 24, 2025

Filed

Jul 18, 2025

To disclose

17 weeks

Affected

1,250state residents only

Linked

5 filings

Confidence

71%

Full breach record for Anker SOLIX →

Solix, Inc. disclosed a cybersecurity incident affecting 1,250 Washington residents. Unauthorized actors accessed employee email accounts via phishing between March 24-27, 2025. Impacted data included names, SSNs, DOBs, driver's licenses, financial accounts, medical info, and credentials. Solix engaged forensic specialists, notified law enforcement, and provided one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d17 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 17 weeks / 116 days

Mar 24, 2025

Begins

Mar 24, 2025

Discovered

Jul 18, 2025

Filed

vs. sector median

2 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_0244e0a1df2d57482025-07-18Verified
Vermont State AGbd_a2255126cd55db682025-07-18Verified
Maine State AGbd_de6510a29d4b37732025-07-18Verified
Illinois State AGbd_abfaa16992fecaa72025-07-01 · +17dVerified

Name: Anker SOLIX
norm: anker solix
Domain: ankersolix.com

Name: Anker SOLIX
norm: anker solix
Domain: ankersolix.com
Industry: TechnologyllmProfessional Servicesllm

Discovered: Mar 24, 2025
Breach occurred: Mar 24, 2025 – Mar 27, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 18, 2025
Affected individuals: 1,250state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial accountCredentials
Data elements: NameSocial Security numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: notifying state regulators, as necessary
Initial access: phishing_link

During the incident: Launched an investigation, with the assistance of third-party forensic specialists
Notified law enforcement
Enhanced its existing security protocols
Took prompt steps to ensure the security of its email tenant
Provided individuals whose personal information was potentially affected by this incident with access to credit monitoring services for one (1) year through CyberScout, a TransUnion company, at no cost to the individuals
Changes made: Enhanced its existing security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGJul 1 · first

Massachusetts State AG+17d

Vermont State AG+17d

Maine State AG+17d

Washington State AG+17d · this page

Pattern: first filing Jul 1 (IL), last Jul 18 (WA) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA34051.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 18, 2025
Raw hash: 40f2a7e4e26e58c7c4344e286599b04c2e311c79430ea3ed56b87a836068d1f8

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityAnker SOLIX

Victim entityAnker SOLIX

Incidentdiscovered Mar 24, 2025

Stated responseLaunched an investigation, with the assistance of third-party forensic specialists

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com