HackingManufacturingManufacturingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Plasser American Corporation

bd_2a6b5f152562e43f · schema v1 · pii pii-v2

Severity

Medium

Discovered

Feb 4, 2025

Filed

Apr 9, 2025

To disclose

—

Affected

5state residents only

Linked

4 filings

Confidence

66%

Full breach record for Plasser American Corporation →

Plasser American Corporation notified Nebraska residents that an unknown actor accessed its network between Feb 2-4, 2025, copying limited data including names, SSNs, bank account numbers, and medical info. Plasser discovered the activity on Feb 4, 2025, and notified 5 Nebraska residents on April 9, 2025. Response included securing the network, notifying law enforcement, and offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

Incident timeline

undetected · 2 days

Feb 2, 2025

Begins

Feb 4, 2025

Discovered

Apr 9, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

A leak claim by safepay about this victim predates this filing by 64 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesafepaybd_4f3fd162462926a62025-02-04 · +64dCandidate

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_5e95910758bb1dde2025-04-09Verified
Indiana State AGbd_fd20cd5ab8da5dcc2025-04-09Verified

Name: Plasser American Corporation
norm: plasser american
Domain: plasseramerican.com

Name: Plasser American Corporation
norm: plasser american
Domain: plasseramerican.com
Industry: Manufacturingllm

Discovered: Feb 4, 2025
Breach occurred: Feb 2, 2025 – Feb 4, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 9, 2025
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Regulator citations: notified federal law enforcement and other required regulatory bodies
Initial access: exploit_public_facing

During the incident: Took steps to secure its network and initiated an investigation
Notifying relevant individuals to make them aware of this event
Providing information and resources to help protect personal information, including an offer of access to credit monitoring for twelve (12) months at no cost
Notified federal law enforcement and other required regulatory bodies
Changes made: Review and enhance our existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGApr 9 · first

Indiana State AGApr 9 · first

Nebraska State AGApr 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/93fac7e4-dee1-4159-b125-966cf3ae920f.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 9, 2025
Raw hash: 33682b8cc63efd737e2c52b2e12f42131a22c138b6a994068575f4de1d0369ce

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityPlasser American Corporation

Victim entityPlasser American Corporation

Incidentdiscovered Feb 4, 2025

Stated responseTook steps to secure its network and initiated an investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov