Social EngineeringHealthcareFinancial ServicesHealthcarePhishingCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Risk Program Administrators LLC

bd_34f806b9ca1918b0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 27, 2025

Filed

Jul 23, 2026

To disclose

—

Affected

7state residents only

Linked

3 filings

Confidence

66%

Full breach record for Risk Program Administrators LLC →

Risk Program Administrators LLC (RPA) notified Nebraska AG of a phishing incident affecting 7 Nebraska residents. An unknown actor accessed employee email accounts between May 27, 2025, and June 16, 2025, potentially exposing names and Social Security numbers. RPA secured the account, engaged third-party cybersecurity specialists, and provided 12 months of credit monitoring to affected individuals. Notices were sent on July 23, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

May 27, 2025

Begins

May 27, 2025

Discovered

Jul 23, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_db867518cbf5e3e52026-07-23Verified
Illinois State AGbd_d79e2565aad5c7662026-08-01 · +9dCandidate

Name: Risk Program Administrators LLC
norm: risk program administrators

Name: Risk Program Administrators LLC
norm: risk program administrators
Industry: HealthcarellmFinancial Servicesllm

Discovered: May 27, 2025
Breach occurred: May 27, 2025 – Jun 16, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 23, 2026
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Providing notice to regulators, as directed
Initial access: phishing_link

During the incident: Secured the email account
Launched an investigation into the nature and scope of the incident with the assistance of third-party cybersecurity specialists
Conducted a comprehensive review of the email account
Provided information about this incident to the potentially impacted entities
Worked with those entities to compile and finalize a list of potentially impacted individuals
Provided written notice of this incident to seven (7) Nebraska residents
Offering 12 months of complimentary credit monitoring and identity protection services through Identify Theft Guard Solutions Inc. (IDX)
Changes made: Reviewing existing security policies
Implemented additional measures to further protect against similar incidents moving forward, including additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

HHS OCRJul 23 · first

Nebraska State AGJul 23 · first · this page

Illinois State AG+9d

Pattern: first filing Jul 23 (CA), last Aug 1 (IL) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/9013905e-af31-4dd3-9b8f-f984dd5c29ea.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 23, 2026
Raw hash: 05e00c93840ddea87fbdd8dccf99c562b40bb93b80e4bb728f52e6f486b3f8d0

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityRisk Program Administrators LLC

Victim entityRisk Program Administrators LLC

Incidentdiscovered May 27, 2025

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov