UnknownOtherIDENTITY_GOVERNMENTPHIPIIHigh
WEL Companies
bd_22f4084318364878 · schema v1 · pii pii-v1
Full breach record for WEL Companies →WEL Companies, Inc. based in De Pere, Wisconsin, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-03-28 and reported on 2025-11-25. 13,157 Texas residents were affected. 122,960 individuals affected in total. Types of information involved: Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Medical Information. Consumers were notified via U.S. Mail.
Texas clock✗ TX AG >30d35 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13,157 affectedView incident
A leak claim by ransomhub about this victim predates this filing by 298 days.View originating leak claim
Source provenance
- Source URL
- https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0004693
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 25, 2025
- Raw hash
- 07cdc92b8bcd1df76c5713b62aeebbd69d3328bbba2ed342fbd590b2944124b5
Reporting entity
- Name
- WEL Companiesnorm: wel companies
- Domain
- welcompanies.com
Victim entity
- Name
- WEL Companiesnorm: wel companies
- Domain
- welcompanies.com
- Industry
- Otherllm
Incident
- Discovered
- Mar 28, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 13,157
- Data types
- IDENTITY_GOVERNMENTPHIPII
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 35 weeks(242 days from discovery to filing)
- Compliance flags
- TX AG >30dLeak >180d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.