HackingOtherStolen CredentialsData ExfiltratedGovernment IDIdentity (basic)MediumContained

SSA Holdings, LLC

bd_1dd069a5a2bc9741 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Sep 15, 2025

Filed

Nov 13, 2025

To disclose

—

Affected

3state residents only

Linked

7 filings

Confidence

66%

Full breach record for SSA Holdings, LLC →2 incidents on file

SSA Holdings, LLC reported a data breach in Nebraska affecting 3 residents. An unauthorized person accessed systems on September 15, 2025, obtaining files containing names and Social Security numbers. Notifications were mailed on November 13, 2025, offering credit monitoring via Kroll. Law enforcement was notified.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 15, 2025

Begins

Sep 15, 2025

Discovered

Nov 13, 2025

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_6fc5dec703fe85f12025-11-13Verified
Massachusetts State AGbd_9ace5e7496f9a3f22025-11-13Verified
California State AGbd_ab4cf346f9f94b092025-11-13Verified
New Hampshire State AGbd_c34bbad8fe4d69b22025-11-13Verified

Show 2 more filings ↓up to 12d gap

Texas State AGbd_0efcbd22983e9c592025-11-14 · +1dCandidate
Illinois State AGbd_54fa92149d4d3aed2025-11-01 · +12dVerified

Name: SSA Holdings, LLC
norm: ssa holdings

Name: SSA Holdings, LLC
norm: ssa holdings
Industry: Otherllm

Discovered: Sep 15, 2025
Breach occurred: Sep 15, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 13, 2025
Affected individuals: 3state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took action to contain the incident
Began an investigation
Reported the incident to law enforcement
Established a dedicated, toll-free call center for individuals to call with questions
Offering credit monitoring through Kroll to the Nebraska residents
Changes made: Taken, and will continue to take, steps to enhance the security of its computer network
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGNov 1 · first

Indiana State AG+12d

Massachusetts State AG+12d

California State AG+12d

New Hampshire State AG+12d

Nebraska State AG+12d · this page

Texas State AG+13d

Pattern: first filing Nov 1 (IL), last Nov 14 (TX) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/0f13c2ef-f4ed-4f7a-91cc-a1991e0cc421.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: fd367ec96fab49f0fa70ca407dc4bc9d827e0cc5fbf22386ce571c3636d4b1d9

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entitySSA Holdings, LLC

Victim entitySSA Holdings, LLC

Incidentdiscovered Sep 15, 2025

Stated responseTook action to contain the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov