HackingOtherCapture Stored DataData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountHighContained

DBH Omaha, LLC

bd_07d5d789158c9fa5 · schema v1 · pii pii-v2

Severity

High

Discovered

Oct 23, 2025

Filed

Jan 23, 2026

To disclose

—

Affected

1,194state residents only

Confidence

66%

Full breach record for DBH Omaha, LLC →

DBH Omaha, LLC reported a cybersecurity incident detected on October 23, 2025, involving unauthorized copying of files from its network between October 22 and 23, 2025. The breach affected 1,194 Nebraska residents, exposing names, Social Security numbers, driver's license numbers, and financial account numbers. Notifications were mailed on January 23, 2026, offering one year of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

Oct 22, 2025

Begins

Oct 23, 2025

Discovered

Jan 23, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,194 affectedView incident

Name: DBH Omaha, LLC
norm: dbh omaha

Name: DBH Omaha, LLC
norm: dbh omaha
Industry: Otherllm

Discovered: Oct 23, 2025
Breach occurred: Oct 22, 2025 – Oct 23, 2025
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jan 23, 2026
Affected individuals: 1,194state-resident count only
Data types: Government IDIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External

During the incident: Implemented its incident response protocols
Took measures to contain the activity
Launched an investigation
Conducted a review of the files involved
Established a dedicated, toll-free call center
Changes made: Taken steps to enhance its existing security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/6cd8daac-0f92-435b-a436-703a21e887c7.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 23, 2026
Raw hash: 23c55608ce3e257967658d547ca54e147348dd881e0dda477d58b8859b60d4c6

Reporting entityDBH Omaha, LLC

Victim entityDBH Omaha, LLC

Incidentdiscovered Oct 23, 2025

Stated responseImplemented its incident response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov