HackingTechnologyInformationDelayed DiscoveryIdentity (basic)LowContained

The Next Street, LLC

bd_2f7f02fdee6c26ae · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 19, 2025

Filed

Jan 16, 2026

To disclose

21 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for The Next Street, LLC →

The Next Street, LLC notified consumers of a data breach affecting its Driving School Software (DSS) platform. An unknown actor gained unauthorized access to the network, compromising names and partial Social Security numbers. The incident was discovered in August 2025, and victims were offered credit monitoring.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday21 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 21 weeks / 150 days

Aug 19, 2025

Discovered

Jan 16, 2026

Filed

vs. sector median

+3 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e652d2c69a77d01a2026-01-17 · +1dVerified

Name: The Next Street, LLC
norm: the next street

Name: The Next Street, LLC
norm: the next street
Industry: Technologyllm

Discovered: Aug 19, 2025
Materiality determined: —
Notification sent: Dec 29, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Federal law enforcement was notified about this incident
Offering complimentary credit monitoring and identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(150 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Vermont State AGJan 16 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2026-01-16-next-street-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 16, 2026
Raw hash: 13684153b228a34d4e32a0a80706c81e4e3f641ef9f8318e74c52b0969266063

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Next Street, LLC

Victim entityThe Next Street, LLC

Incidentdiscovered Aug 19, 2025

Stated responseFederal law enforcement was notified about this incident

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov