DisclosureLens
MalwareEducationEducationRansomwareQuilinData ExfiltratedData EncryptedCustomer Data InvolvedTargetedIdentity (basic)Government IDHealth (basic)MediumContained

National Center for Construction Education and Research

bd_3da65e266e462bc1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 21, 2025

Filed

May 1, 2026

To disclose

Affected

24state residents only

Linked

5 filings

Confidence

68%
Full breach record for National Center for Construction Education and Research2 incidents on file

National Center for Construction Education and Research (NCCER) reported a security incident to the Nebraska Attorney General on May 22, 2026. NCCER discovered unauthorized network activity on March 21, 2025, attributed to the Quilin ransomware group. The incident resulted in the exfiltration of personal information, including names, SSNs, driver's licenses, and health data, affecting 24 Nebraska residents. NCCER took systems offline, engaged forensic investigators, and offered 12 months of credit monitoring.

Incident timeline

Mar 21, 2025

Discovered

May 1, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGMay 1 · first
Nebraska State AGMay 1 · first · this page

Pattern: first filing May 1 (IN), last May 28 (TX) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.