MalwareTechnologyHealthcareInformationRansomwareBlack BastaData ExfiltratedData EncryptedData PublishedCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)MediumContained

WorldOne Inc.

bd_4bf2974957f53ef3 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Apr 10, 2024

Filed

Feb 9, 2026

To disclose

—

Affected

16state residents only

Linked

7 records

Confidence

65%

Full breach record for WorldOne Inc. →2 incidents on file

WorldOne Inc. (dba Sermo) notified the Nebraska AG of a ransomware incident involving Black Basta. Unauthorized access occurred March 19–April 10, 2024, resulting in the exfiltration and publication of 16 Nebraska residents' names and Social Security numbers. Notifications were sent on February 9, 2026, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 22 days

Mar 19, 2024

Begins

Apr 10, 2024

Discovered

Feb 9, 2026

Filed

This filing is one of 7 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_39f8b9fed6617a2e2024-03-19 · +692dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_2c692d17ae0811bd2026-02-09Candidate
Maine State AGBlack Bastabd_7c49c9b0c9b49ab62026-02-09Verified by operator
New Hampshire State AGBlack Bastabd_8b6e47cbe8564c3e2026-02-09Verified by operator
Indiana State AGbd_f9e4422ef61e72ae2026-02-09Verified by operator

Show 1 more filing ↓up to 1d gap

Massachusetts State AGbd_b588b71b7c55954f2026-02-10 · +1dVerified

Name: Kennedys CMK LLP
norm: kennedys cmk

Name: WorldOne Inc.
norm: worldone
Domain: sermo.com
Also named: WorldOne Inc.dba oflegal entity
Sermodba oftrade name
Industry: TechnologyllmHealthcarellm

Discovered: Apr 10, 2024
Breach occurred: Mar 19, 2024 – Apr 10, 2024
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 9, 2026
Affected individuals: 16state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Ransomware· Black Basta
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1114 Email Collection
Threat actor: Black BastaExternalFinancial
Regulator citations: Notified Nebraska Attorney General

During the incident: Retained cybersecurity professionals to investigate
Secured network environment
Reviewed and updated existing security policies and protections
Implemented additional security to safeguard against evolving threats
Offered 12 months of complimentary identity monitoring services through Kroll
Changes made: Reviewed and updated existing security policies and protections
Implemented additional security to safeguard against evolving threats
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGFeb 9 · first

Maine State AGFeb 9 · first

New Hampshire State AGFeb 9 · first

Indiana State AGFeb 9 · first

Nebraska State AGFeb 9 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/5343aeda-edcb-4483-aab5-7efc4bfb2978.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2026
Raw hash: cde718f215e069d722801855db0741809b75198202824e6fda42b2eae73ab94f

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityKennedys CMK LLP

Victim entityWorldOne Inc.

Incidentdiscovered Apr 10, 2024

Stated responseRetained cybersecurity professionals to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov