HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Nelson Worldwide LLC
bd_157f17b07faa116b · schema v1 · pii pii-v1
Full breach record for Nelson Worldwide LLC →Nelson Worldwide, LLC reported unauthorized network access on February 18, 2026. The incident compromised customer names. The company engaged external forensic investigators, secured the network, and offered complimentary credit monitoring services to affected individuals. No specific count of affected individuals was disclosed in the filing.
Vermont clock⏱ VT AG >14 bday21 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6df9629640865473Leak Sitechaosfiled 2026-03-06(4d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_da9dd53b13b0803eIndiana State AGfiled 2026-03-11Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-03-11-nelson-worldwide-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 11, 2026
- Raw hash
- 0cd32c9a12572dec5f67779aa0e94b57a81139bad705e5bd37a43742c17b97fc
Reporting entity
- Name
- Nelson Worldwide LLCnorm: nelson worldwide
- Domain
- nelsonworldwide.com
Victim entity
- Name
- Nelson Worldwide LLCnorm: nelson worldwide
- Domain
- nelsonworldwide.com
Incident
- Discovered
- Feb 18, 2026
- Materiality determined
- Mar 11, 2026
- Notification sent
- Mar 11, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.