HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Arcadia of Elizabethtown LLC

bd_10ea2f67f41ba2f3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 2, 2026

Filed

Jun 29, 2026

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for Arcadia of Elizabethtown LLC →

Arcadia of Elizabethtown LLC reported a data security incident to the Nebraska Attorney General on June 29, 2026. Suspicious activity was detected on January 2, 2026, leading to system disconnection and forensic investigation. The incident potentially exposed names, addresses, and Social Security numbers of one Nebraska resident. The company changed passwords, enhanced endpoint detection, and offered 12 months of identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 2, 2026

Discovered

Jun 29, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_8a4acc5d92269c442026-06-29Candidate
Indiana State AGbd_a9022a67b99c5dba2026-06-29Candidate
Indiana State AGbd_bcaf0d059dff2bc62026-06-29Candidate

Name: Arcadia of Elizabethtown LLC
norm: arcadia of elizabethtown

Name: Arcadia of Elizabethtown LLC
norm: arcadia of elizabethtown
Industry: Healthcarellm

Discovered: Jan 2, 2026
Materiality determined: —
Notification sent: Jun 29, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Disconnected their systems
Engaged independent computer forensic experts to assist
Changed passwords to user accounts
Added additional endpoint detection and protection software
Implemented additional restrictions on our systems
Offering 12 months of identity theft protection services through IDX
Changes made: Added additional endpoint detection and protection software
Implemented additional restrictions on our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 2 states

View merged incident ↗

Indiana State AGJun 29 · first

Nebraska State AGJun 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/76560255-17eb-43c6-8be6-3f840f9d2004.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2026
Raw hash: 6d6b7920d754cc8de84744ed7e597798c80e4e7a39bc837670f971d98fa45929

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityArcadia of Elizabethtown LLC

Victim entityArcadia of Elizabethtown LLC

Incidentdiscovered Jan 2, 2026

Stated responseDisconnected their systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov