MalwareTechnologyHealthcareInformationRansomwareBlack BastaData ExfiltratedData EncryptedData PublishedCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)MediumContained

WorldOne Inc.

bd_4bf2974957f53ef3 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Apr 10, 2024

Filed

Feb 9, 2026

To disclose

—

Affected

16state residents only

Linked

6 filings

Confidence

65%

Full breach record for WorldOne Inc. →5 incidents on file

WorldOne Inc. (dba Sermo) notified the Nebraska AG of a ransomware incident involving Black Basta. Unauthorized access occurred March 19–April 10, 2024, resulting in the exfiltration and publication of 16 Nebraska residents' names and Social Security numbers. Notifications were sent on February 9, 2026, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

Incident timeline

undetected · 22 days

Mar 19, 2024

Begins

Apr 10, 2024

Discovered

Feb 9, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by medusa about this victim predates this filing by 692 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_2c692d17ae0811bd2026-02-09Candidate
Maine State AGBlack Bastabd_7c49c9b0c9b49ab62026-02-09Verified
New Hampshire State AGBlack Bastabd_8b6e47cbe8564c3e2026-02-09Verified
Indiana State AGbd_f9e4422ef61e72ae2026-02-09Candidate

Show 1 more filing ↓up to 1d gap

Massachusetts State AGbd_b588b71b7c55954f2026-02-10 · +1dVerified

Name: Kennedys CMK LLP
norm: kennedys cmk

Name: WorldOne Inc.
norm: worldone
Domain: sermo.com
Also named: WorldOne Inc.dba oflegal entity
Sermodba oftrade name
Industry: TechnologyllmHealthcarellm

Discovered: Apr 10, 2024
Breach occurred: Mar 19, 2024 – Apr 10, 2024
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 9, 2026
Affected individuals: 16state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Ransomware· Black Basta
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1114 Email Collection
Threat actor: Black BastaExternalFinancial
Regulator citations: Notified Nebraska Attorney General

During the incident: Retained cybersecurity professionals to investigate
Secured network environment
Reviewed and updated existing security policies and protections
Implemented additional security to safeguard against evolving threats
Offered 12 months of complimentary identity monitoring services through Kroll
Changes made: Reviewed and updated existing security policies and protections
Implemented additional security to safeguard against evolving threats
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGFeb 9 · first

Maine State AGFeb 9 · first

New Hampshire State AGFeb 9 · first

Indiana State AGFeb 9 · first

Nebraska State AGFeb 9 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/5343aeda-edcb-4483-aab5-7efc4bfb2978.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2026
Raw hash: cde718f215e069d722801855db0741809b75198202824e6fda42b2eae73ab94f

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityKennedys CMK LLP

Victim entityWorldOne Inc.

Incidentdiscovered Apr 10, 2024

Stated responseRetained cybersecurity professionals to investigate

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov