MalwareRetail & ConsumerRetailRansomwareData EncryptedData ExfiltratedGovernment IDIdentity (basic)MediumContained

Fullbeauty Brands, Inc.

bd_433370b20ae7a098 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Oct 22, 2025

Filed

Feb 20, 2026

To disclose

—

Affected

1state residents only

Linked

6 filings

Confidence

66%

Full breach record for Fullbeauty Brands, Inc. →

FullBeauty Brands, Inc. disclosed a ransomware incident affecting its internal network in Nebraska. Unauthorized access occurred between October 18 and November 19, 2025. The breach impacted one Nebraska resident, exposing their name and Social Security number. Notification was mailed on February 20, 2026, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

undetected · 4 days

Oct 18, 2025

Begins

Oct 22, 2025

Discovered

Feb 20, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by everest about this victim predates this filing by 98 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteeverestbd_b418380b472e78722025-11-13 · +98dVerified

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_6acfca6a3a1dbf7f2026-01-23 · +28dVerified by operator
Texas State AGbd_e4181d69cc7d2fe32026-01-23 · +28dVerified
New Hampshire State AGbd_91acf73a54463ef02026-01-21 · +30dVerified
Indiana State AGbd_e39cdf0211b8ccc52026-01-16 · +35dVerified

Name: Fullbeauty Brands, Inc.
norm: fullbeauty brands
Domain: fbbrands.com

Name: Fullbeauty Brands, Inc.
norm: fullbeauty brands
Domain: fbbrands.com
Industry: Retail & Consumerllm

Discovered: Oct 22, 2025
Breach occurred: Oct 18, 2025 – Nov 19, 2025
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 20, 2026
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Took measures to secure their network
Launched an investigation with help from cybersecurity partners
Mailed a notification letter via U.S. First-Class mail
Offering one year of complimentary credit monitoring and identity theft protection services
Established a toll-free call center
Changes made: Implemented additional measures to enhance the security of its network
Increasing awareness of cybersecurity threats through employee training
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJan 16 · first

New Hampshire State AG+5d

Massachusetts State AG+7d

Texas State AG+7d

Nebraska State AG+35d · this page

Pattern: first filing Jan 16 (IN), last Feb 20 (NE) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/caba130d-55f2-40ae-900e-b9870a72c6b6.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2026
Raw hash: a55f5c3e87bbc7d57963db177ed33eabfc201b28ffc9a0432eea38b467e35783

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityFullbeauty Brands, Inc.

Victim entityFullbeauty Brands, Inc.

Incidentdiscovered Oct 22, 2025

Stated responseTook measures to secure their network

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov