Ancora Holdings Group, LLC notified Vermont AG of a data security incident discovered on October 9, 2025, involving suspicious email activity. Unauthorized access to emails containing PII (names, DOB, SSN, financial account numbers, passport numbers) was determined on January 16, 2026. The company engaged forensic investigators and is offering 12 months of credit monitoring.