UnknownProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPHIMedium

The John Buck Company

bd_087a5a207a6c373c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 8, 2026

To disclose

—

Affected

23state residents only

Confidence

67%

Full breach record for The John Buck Company →2 incidents on file

The John Buck Company, L.L.C. notified Massachusetts residents of a cybersecurity incident exposing names, Social Security numbers, driver's license numbers, financial account numbers, and health insurance information. The company offered two years of complimentary credit monitoring via Cyberscout and stated it has enhanced security measures. No specific dates for discovery or occurrence were provided in the notice.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jan 8, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed23 affectedView incident

Name: The John Buck Company
norm: the john buck

Name: The John Buck Company
norm: the john buck
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Dec 22, 2025
Affected individuals: 23state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHI
Attack vector: Unknown

During the incident: Arranged for complimentary, two-year membership of credit monitoring and identity theft protection services by Cyberscout
Taken steps to enhance existing security measures
Changes made: Taken steps to enhance existing security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-26-the-john-buck-company-tjbc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 8, 2026
Raw hash: 1221ed914c0a24846132c6fb50e49d43b59f909b0942aa351609edf12277bfaa

Reporting entityThe John Buck Company

Victim entityThe John Buck Company

IncidentUnknown

Stated responseArranged for complimentary, two-year membership of credit monitoring and identity theft protection services by Cyberscout

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov