Social EngineeringProfessional ServicesProfessional ServicesPhishingCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)LowContained

PDL Pratt Associates LLC

bd_11ffd3d9d1e48444 · schema v1 · pii pii-v2

Severity

Low

Discovered

Jul 29, 2025

Filed

Dec 30, 2025

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

65%

Full breach record for PDL Pratt Associates LLC →

Pratt & Associates LLC, a NY-based tax and accounting firm, notified Nebraska residents of a data breach involving unauthorized access to an email account. The incident occurred on or around July 29, 2025, and was discovered shortly thereafter. Personal information, including names and potentially other PII, was accessed. Notices were sent on December 23, 2025, offering credit monitoring via Epiq. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 29, 2025

Begins

Jul 29, 2025

Discovered

Dec 30, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_25940b61997332ac2025-12-30Candidate
Indiana State AGbd_44c6cef4cbb2eeb62025-12-30Verified
Massachusetts State AGbd_7034964371816a3e2025-12-30Verified
Maine State AGbd_8af94f2c29f62a352025-12-30Verified

Show 1 more filing ↓

New Hampshire State AGbd_d0d4d6ccda09c9d12025-12-30Verified

Name: PDL Pratt Associates LLC
norm: pdl pratt associates

Name: PDL Pratt Associates LLC
norm: pdl pratt associates
Industry: Professional Servicesllm

Discovered: Jul 29, 2025
Breach occurred: Jul 29, 2025 – Jul 30, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 23, 2025
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Launched an investigation with the support of external cybersecurity experts
Took steps to secure our IT environment
Implementing enhanced security measures
Offering you the opportunity to enroll in complimentary credit monitoring and identity theft protection services through Epiq
Changes made: Implementing enhanced security measures to help prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGDec 30 · first

Indiana State AGDec 30 · first

Massachusetts State AGDec 30 · first

Maine State AGDec 30 · first

New Hampshire State AGDec 30 · first

Nebraska State AGDec 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/366710e5-4657-4c15-9260-a9d6cf9d7118.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2025
Raw hash: fabd451c3e405b39d4374fce8bf9c640327abd4990d7e7a76317ab87d705e874

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPDL Pratt Associates LLC

Victim entityPDL Pratt Associates LLC

Incidentdiscovered Jul 29, 2025

Stated responseLaunched an investigation with the support of external cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov