HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedIdentity (basic)LowContained

Apro, LLC

bd_012484720eafaaa9 · schema v1 · pii pii-v2

Severity

Low

Discovered

Mar 22, 2025

Filed

Dec 29, 2025

To disclose

—

Affected

Not disclosed

Linked

11 filings

Confidence

65%

Full breach record for Apro, LLC →3 incidents on file

Apro LLC (dba United Pacific) notified Nebraska residents of a data breach where unauthorized third parties accessed systems between Feb 19 and Mar 2, 2025. Discovery occurred on Mar 22, 2025. Personal information, including names, was potentially accessed. Apro engaged cybersecurity firms and law enforcement, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 31 days

Feb 19, 2025

Begins

Mar 22, 2025

Discovered

Dec 29, 2025

Filed

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Oregon State AGbd_16389e96311185da2025-12-29Candidate
California State AGbd_5a2af9e1606bffab2025-12-29Verified
Massachusetts State AGbd_68418fa12605f1862025-12-29Verified
Washington State AGbd_92a219fd595ad40f2025-12-29Verified

Show 6 more filings ↓

Washington State AGbd_9b890dc299bb37f82025-12-29Verified
Maine State AGbd_a14649851a366e8c2025-12-29Verified
Indiana State AGbd_bc689181dec5de1d2025-12-29Candidate
Indiana State AGbd_c87591ff1ff51cdd2025-12-29Verified
Nebraska State AGbd_cb4ed0be09dddd5f2025-12-29Verified
California State AGbd_e2ae2834649e791a2025-12-29Verified

Name: Apro, LLC
norm: apro

Name: Apro, LLC
norm: apro
Also named: Apro LLCdba oflegal entity
United Pacificdba oftrade name
Industry: Retail & Consumerllm

Discovered: Mar 22, 2025
Breach occurred: Feb 19, 2025 – Mar 2, 2025
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 29, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Launched an investigation
Engaged leading cybersecurity firms
Notified law enforcement
Changes made: Implemented additional measures to further enhance the security of its systems and data
Offering a complimentary [12/24]-month membership of Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 7 states

View merged incident ↗

Oregon State AGDec 29 · first

California State AGDec 29 · first

Massachusetts State AGDec 29 · first

Washington State AGDec 29 · first

Maine State AGDec 29 · first

Indiana State AGDec 29 · first

Nebraska State AGDec 29 · first

California State AGDec 29 · first

Nebraska State AGDec 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/147ea756-3d1b-47b9-bcd1-4083674623c3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 29, 2025
Raw hash: 962522367665d5cca56ad28651a89e67a9c9cf7a0d2279f6ce9d8bf63dbb443e

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityApro, LLC

Victim entityApro, LLC

Incidentdiscovered Mar 22, 2025

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov