HackingIdentity (basic)Government IDMediumContained

FSA Marketing Systems Inc

bd_1b80c1e08eff1c59 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Feb 17, 2025

Filed

Oct 14, 2025

To disclose

—

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for FSA Marketing Systems Inc →

FSA Marketing Systems Inc reported a data security incident to the Nebraska Attorney General on October 14, 2025. Unauthorized access to files occurred between January 1 and 27, 2025. The breach affected 2 Nebraska residents, exposing names, driver's license/state ID numbers, and Social Security numbers. FSA engaged cybersecurity experts, notified the FBI, and provided 12 months of complimentary identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 47 days

Jan 1, 2025

Begins

Feb 17, 2025

Discovered

Oct 14, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_56b91bcfe24f26682025-10-14Verified
Indiana State AGbd_92c368d4ca40881e2025-10-14Candidate
Massachusetts State AGbd_8df784b56c3fe1942025-10-15 · +1dVerified

Name: FSA Marketing Systems Inc
norm: fsa marketing

Name: FSA Marketing Systems Inc
norm: fsa marketing

Discovered: Feb 17, 2025
Breach occurred: Jan 1, 2025 – Jan 27, 2025
Undetected for: 47 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 14, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: exploit_public_facing

During the incident: Engaged independent cybersecurity experts
Engaged a third-party vendor to complete a comprehensive and thorough review of the data
Established a toll-free call center through IDX
Notified the Federal Bureau of Investigation
Changes made: Offered complimentary identity protection services including 12 months of credit monitoring, dark web monitoring, $1 million identity fraud loss reimbursement policy, and fully managed identity theft recovery services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGOct 14 · first

Indiana State AGOct 14 · first

Nebraska State AGOct 14 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/40b6b2e3-b610-4e9a-9a44-94496fd5f161.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 14, 2025
Raw hash: 2aa9af1efd29965f192adfe9024a4dac67d3949021e3d93fb496a009d58df8a5

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityFSA Marketing Systems Inc

Victim entityFSA Marketing Systems Inc

Incidentdiscovered Feb 17, 2025

Stated responseEngaged independent cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov