HackingIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

GenPro Inc.

bd_3854007d8dc019ac · schema v1 · pii pii-v2

Severity

Medium

Discovered

Sep 23, 2024

Filed

Apr 24, 2025

To disclose

—

Affected

1state residents only

Linked

7 filings

Confidence

66%

Full breach record for GenPro Inc. →

Genpro, Inc. notified the Nebraska Attorney General of a data security incident affecting 1 Nebraska resident. Unauthorized access occurred on September 23, 2024, involving names, SSNs, driver's licenses, health insurance numbers, and financial account data. Genpro engaged cybersecurity experts, notified the FBI, and provided 12 months of TransUnion credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

Incident timeline

Sep 23, 2024

Begins

Sep 23, 2024

Discovered

Apr 24, 2025

Filed

This filing is one of 7 about the same incident.View merged incident

A leak claim by blacksuit about this victim predates this filing by 213 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteblacksuitbd_fa5a1ac0791a62b52024-09-24 · +212dVerified by operator
Leak Siteblacksuitbd_e43a8f7cffc743aa2024-09-23 · +213dVerified by operator

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_56a01fef7885771f2025-04-24Verified
New Hampshire State AGbd_37576bf218865aa02025-04-25 · +1dVerified
Maine State AGbd_4432a9d0a0ac9d552025-04-25 · +1dVerified
Massachusetts State AGbd_fc5e13b65db14f682025-04-29 · +5dVerified

Name: GenPro Inc.
norm: genpro
Domain: genproinc.com

Name: GenPro Inc.
norm: genpro
Domain: genproinc.com

Discovered: Sep 23, 2024
Breach occurred: Sep 23, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 24, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Enlisted the assistance of cybersecurity and other technical experts
Implemented additional safeguards
Providing those whose Social Security number was involved with identity protection services through TransUnion
Established a toll-free call center through TransUnion
Notified the Federal Bureau of Investigation of the incident
Changes made: Implemented additional safeguards to help ensure the security of its systems
Performed a thorough review of our systems to investigate the incident and ensure that our systems remain secure
Implemented additional security measures to protect our digital environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGApr 24 · first

Nebraska State AGApr 24 · first · this page

New Hampshire State AG+1d

Maine State AG+1d

Massachusetts State AG+5d

Pattern: first filing Apr 24 (IN), last Apr 29 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/e2cbff49-678b-4612-a2dd-955aef610fe2.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 24, 2025
Raw hash: eedd9502ab57a94e8c979895839551fc96655681cb9a3711926163496c7dbd94

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityGenPro Inc.

Victim entityGenPro Inc.

Incidentdiscovered Sep 23, 2024

Stated responseEnlisted the assistance of cybersecurity and other technical experts

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov