Vermont Attorney General: Terra Holdings Data Breach Exposes SSNs

Vermont Attorney General: Terra Holdings Data Breach Exposes SSNs

Terra Holdings Data Breach Exposes Sensitive Personal Information of 143+ Massachusetts Residents

Terra Holdings, LLC, a major real estate services firm, disclosed a data breach that compromised the personally identifiable information (PII) of individuals across multiple states. The incident was first detected on February 13, 2025, after suspicious activity was identified within the company’s systems. A forensic investigation later revealed that unauthorized access occurred between February 11 and 13, 2025, though the full scope of the breach was not confirmed until January 26, 2026.

Exposed data includes names, Social Security numbers, driver’s license numbers, and financial account details. The breach affected at least 143 Massachusetts residents, prompting Terra Holdings to file disclosures with the Massachusetts Office of Consumer Affairs and Business Regulation and the Vermont Attorney General.

In response, the company is offering complimentary credit monitoring and identity restoration services through Epiq for up to 24 months. These services include credit file monitoring, VantageScore reporting, Social Security number tracking, dark web surveillance, identity restoration assistance, and up to $1 million in identity theft insurance. Affected individuals were notified via letter with enrollment instructions.

The delayed confirmation of the breach nearly a year after detection highlights the complexity of forensic investigations in cybersecurity incidents. The exposed data poses significant risks for identity theft and financial fraud.

Source: https://www.claimdepot.com/data-breach/terra-holdings-2026

Vermont Attorney General TPRM report: https://www.rankiteo.com/company/vermont-real-estate-company

"id": "ver1771015440",
"linkid": "vermont-real-estate-company",
"type": "Breach",
"date": "2/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '143+ Massachusetts residents',
                        'industry': 'Real Estate Services',
                        'location': 'United States',
                        'name': 'Terra Holdings, LLC',
                        'type': 'Company'}],
 'customer_advisories': 'Complimentary credit monitoring and identity '
                        'restoration services for 24 months (Epiq)',
 'data_breach': {'number_of_records_exposed': '143+ (Massachusetts residents)',
                 'personally_identifiable_information': 'Names, Social '
                                                        'Security numbers, '
                                                        'driver’s license '
                                                        'numbers, financial '
                                                        'account details',
                 'sensitivity_of_data': 'High (Social Security numbers, '
                                        'driver’s license numbers, financial '
                                        'account details)',
                 'type_of_data_compromised': 'Personally identifiable '
                                             'information (PII)'},
 'date_detected': '2025-02-13',
 'date_publicly_disclosed': '2026-01-26',
 'description': 'Terra Holdings, LLC, a major real estate services firm, '
                'disclosed a data breach that compromised the personally '
                'identifiable information (PII) of individuals across multiple '
                'states. The incident was first detected on February 13, 2025, '
                'after suspicious activity was identified within the company’s '
                'systems. A forensic investigation later revealed that '
                'unauthorized access occurred between February 11 and 13, '
                '2025, though the full scope of the breach was not confirmed '
                'until January 26, 2026. Exposed data includes names, Social '
                'Security numbers, driver’s license numbers, and financial '
                'account details. The breach affected at least 143 '
                'Massachusetts residents, prompting Terra Holdings to file '
                'disclosures with the Massachusetts Office of Consumer Affairs '
                'and Business Regulation and the Vermont Attorney General.',
 'impact': {'data_compromised': 'Personally identifiable information (PII), '
                                'including names, Social Security numbers, '
                                'driver’s license numbers, and financial '
                                'account details',
            'identity_theft_risk': 'Significant',
            'payment_information_risk': 'Significant'},
 'investigation_status': 'Completed (forensic investigation)',
 'references': [{'source': 'Massachusetts Office of Consumer Affairs and '
                           'Business Regulation'},
                {'source': 'Vermont Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Filed disclosures with '
                                                       'the Massachusetts '
                                                       'Office of Consumer '
                                                       'Affairs and Business '
                                                       'Regulation and the '
                                                       'Vermont Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Affected individuals notified via '
                                        'letter with enrollment instructions '
                                        'for credit monitoring services',
              'third_party_assistance': 'Epiq (credit monitoring and identity '
                                        'restoration services)'},
 'title': 'Terra Holdings Data Breach Exposes Sensitive Personal Information '
          'of 143+ Massachusetts Residents',
 'type': 'Data Breach'}
Great! Next, complete checkout for full access to Rankiteo Blog.
Welcome back! You've successfully signed in.
You've successfully subscribed to Rankiteo Blog.
Success! Your account is fully activated, you now have access to all content.
Success! Your billing info has been updated.
Your billing was not updated.