HackingManufacturingManufacturingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

National Coatings Corporation

bd_48d46723a420ae75 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 14, 2025

Filed

Mar 19, 2026

To disclose

—

Affected

7state residents only

Linked

4 filings

Confidence

66%

Full breach record for National Coatings Corporation →

National Coatings, Inc. (NCI) notified Nebraska regulators of a cybersecurity incident discovered on October 14, 2025. An unknown actor accessed network segments between September 28 and October 14, 2025, copying files containing names, SSNs, driver's license numbers, and medical information. NCI notified federal law enforcement, engaged forensic specialists, and provided 12 months of credit monitoring to 7 affected Nebraska residents starting March 19, 2026.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

undetected · 16 days

Sep 28, 2025

Begins

Oct 14, 2025

Discovered

Mar 19, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 157 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelynxbd_c2aa51a292ca11002025-10-13 · +157dVerified by operator
Leak Siteplaybd_ea35411f77774d6e2025-10-13 · +157dVerified by operator

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_eb743c348a59dcb52026-03-19Verified by operator

Name: National Coatings Corporation
norm: national coatings
Domain: nationalcoatingsinc.com

Name: National Coatings Corporation
norm: national coatings
Domain: nationalcoatingsinc.com
Industry: Manufacturingllm

Discovered: Oct 14, 2025
Breach occurred: Sep 28, 2025 – Oct 14, 2025
Undetected for: 16 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 19, 2026
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Medical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: providing written notice of this incident to relevant state regulators
Initial access: valid_credentials

During the incident: Launched an investigation with the assistance of third-party cybersecurity and digital forensics specialists
Conducted a thorough and time-intensive review of the potentially impacted files
Notified federal law enforcement regarding the event
Providing access to credit monitoring services for twelve (12) months, through TransUnion
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state regulators
Providing written notice of this incident to the three major credit reporting agencies
Changes made: Working to implement additional safeguards and training to its employees
Reviewed our existing policies and procedures and implemented enhanced certain administrative and technical controls
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMar 19 · first

Nebraska State AGMar 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/e127a168-2a61-4d80-87c1-2e119882bd93.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2026
Raw hash: b827036551699aa2878496cbc3c0be8fa8b3f6b461ed27f5a391cd44b282d3ca

Linked disclosures

Ransomware claims (2)

Regulatory filings (1) · sorted by filing gap

Reporting entityNational Coatings Corporation

Victim entityNational Coatings Corporation

Incidentdiscovered Oct 14, 2025

Stated responseLaunched an investigation with the assistance of third-party cybersecurity and digital forensics specialists

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov