HackingGovernment IDFinancial accountMediumContained

Redbrick LMD`

bd_184da0c8e7415907 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 29, 2024

Filed

Apr 25, 2025

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for Redbrick LMD` →

Redbrick LMD LLC notified Nebraska AG of a security incident detected on July 29, 2024, involving unauthorized access to network files containing Social Security Numbers and Account Numbers. The company determined personal information was impacted on March 7, 2025, and sent notification letters on April 24, 2025, offering 12 months of IDX identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 29, 2024

Discovered

Apr 25, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_3104db3bbd2696a82025-04-25Verified
Indiana State AGbd_b1ac8bfdc4ed6b912025-04-25Verified
New Hampshire State AGbd_450bfaa50cc147382025-05-05 · +10dVerified
Maine State AGbd_bd18144fb0738bb82025-05-08 · +13dVerified

Show 1 more filing ↓up to 14d gap

Massachusetts State AGbd_7daa736bcb8dc4952025-05-09 · +14dVerified

Name: Redbrick LMD`
norm: redbrick lmd

Name: Redbrick LMD`
norm: redbrick lmd

Discovered: Jul 29, 2024
Materiality determined: —
Notification sent: Apr 24, 2025
Affected individuals: Not disclosed
Data types: Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Secured our network
Launched an investigation in consultation with outside cybersecurity professionals
Offering identity theft protection services through IDX
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGApr 25 · first

Indiana State AGApr 25 · first

Nebraska State AGApr 25 · first · this page

New Hampshire State AG+10d

Maine State AG+13d

Massachusetts State AG+14d

Pattern: first filing Apr 25 (VT), last May 9 (MA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/ed14865e-ff3c-41dc-b7ac-d9ae9f805f6d.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 25, 2025
Raw hash: d57551b3c389972cce8ad87084aac056bd11251bcfd454da603fa9f4eeda9346

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityRedbrick LMD`

Victim entityRedbrick LMD`

Incidentdiscovered Jul 29, 2024

Stated responseSecured our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov