HackingPIIIdentity (basic)Government IDMediumContained

Arcadia of Bowling Green LLC

bd_3454d2b2aba74805 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 2, 2026

Filed

Jun 29, 2026

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Arcadia of Bowling Green LLC →

Arcadia of Bowling Green LLC reported a data security incident to the Nebraska Attorney General on June 29, 2026. Suspicious activity was identified on January 2, 2026, leading to system disconnection and forensic investigation. The incident potentially exposed the name, address, and Social Security number of one Nebraska resident. The company implemented security controls, offered identity theft protection, and notified the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 2, 2026

Discovered

Jun 29, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_6ca21d81281bca4e2026-06-29Verified
Indiana State AGbd_751b21d375bcaa372026-06-29Verified

Name: Arcadia of Bowling Green LLC
norm: arcadia of bowling green

Name: Arcadia of Bowling Green LLC
norm: arcadia of bowling green

Discovered: Jan 2, 2026
Materiality determined: —
Notification sent: Jun 29, 2026
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Nebraska Attorney General
Initial access: valid_credentials

During the incident: Disconnected their systems
Engaged independent computer forensic experts to assist
Changed passwords to user accounts
Added additional endpoint detection and protection software
Implemented additional restrictions on our systems
Offering 12 months of identity theft protection services through IDX
Changes made: Changed passwords to user accounts
Added additional endpoint detection and protection software
Implemented additional restrictions on our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Indiana State AGJun 29 · first

Nebraska State AGJun 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/d86d1c84-3cad-4cdc-917f-9eac504a3fd3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2026
Raw hash: a24c0beb2f38b2ef6db10141d3f648f60661d92f79a2bb8225c581cdad812d00

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityArcadia of Bowling Green LLC

Victim entityArcadia of Bowling Green LLC

Incidentdiscovered Jan 2, 2026

Stated responseDisconnected their systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov