HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Sasserath & Co

bd_fdbb579e3d47e1ae · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 11, 2025

Filed

Dec 30, 2025

To disclose

16 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Sasserath & Co →

Sasserath & Co notified consumers of a data breach where unauthorized access to a single workstation exposed draft tax returns containing names and government identifiers (SSN, DOB, etc.). The incident occurred July 21–August 27, 2025, and was discovered on September 11, 2025. The company re-secured the system, engaged forensic specialists, notified the IRS and law enforcement, and offered credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday16 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 52 days

discovery → filing · 16 weeks / 110 days

Jul 21, 2025

Begins

Sep 11, 2025

Discovered

Dec 30, 2025

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Sasserath & Co
norm: sasserath

Name: Sasserath & Co
norm: sasserath
Industry: Professional Servicesllm

Discovered: Sep 11, 2025
Breach occurred: Jul 21, 2025 – Aug 27, 2025
Undetected for: 52 daysoccurrence → discovery
Materiality determined: Sep 11, 2025
Notification sent: Dec 30, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the IRSNotified law enforcement
Initial access: valid_credentials

During the incident: Engaged outside cybersecurity specialists to investigate
Notified the IRS and law enforcement
Re-secured the workstation
Conducted a thorough review of the tax returns accessed
Provided complimentary identity and credit monitoring services through Kroll
Changes made: Re-secured the workstation
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(110 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-12-30-sasserath-co-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2025
Raw hash: b4aa2aeeedd9fe2e95d84de66702b677d6afc60b86f4ea1011e495a6a119b74a

Reporting entitySasserath & Co

Victim entitySasserath & Co

Incidentdiscovered Sep 11, 2025

Stated responseEngaged outside cybersecurity specialists to investigate

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov