HackingIdentity (basic)Government IDMediumContained

Daniel H Cook Associates Inc.

bd_4c0c07cde7211b46 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Oct 17, 2025

Filed

Jan 16, 2026

To disclose

—

Affected

2state residents only

Linked

6 filings

Confidence

66%

Full breach record for Daniel H Cook Associates Inc. →

Daniel H. Cook Associates, Inc. notified the Nebraska Attorney General of a data security incident discovered on October 17, 2025. Unauthorized access to files containing names and Social Security numbers affected approximately two Nebraska residents. Notifications were sent on January 16, 2026. The company engaged cybersecurity experts, implemented safeguards, and offered 12 months of credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 17, 2025

Begins

Oct 17, 2025

Discovered

Jan 16, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_57b4bbcb437913d42026-01-16Candidate
Maine State AGbd_4940aed01302720f2026-01-17 · +1dVerified
Massachusetts State AGbd_5ef72123859a986f2026-01-17 · +1dVerified
New Hampshire State AGbd_040ee33be34539102026-01-20 · +4dVerified

Show 1 more filing ↓up to 14d gap

Vermont State AGbd_251c4ada515338e32026-01-30 · +14dVerified

Name: Daniel H Cook Associates Inc.
norm: daniel h cook associates

Name: Daniel H Cook Associates Inc.
norm: daniel h cook associates

Discovered: Oct 17, 2025
Breach occurred: Oct 17, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 16, 2026
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified Nebraska Attorney General Consumer Protection Division
Initial access: exploit_public_facing

During the incident: Engaged cybersecurity experts to assist with the process
Implemented additional safeguards to help ensure the security of its systems
Offered affected individuals 12 months of complimentary credit monitoring and identity protection services through Epiq - Privacy Solutions ID
Established a toll-free call center through IDX to answer questions
Changes made: Implemented additional safeguards to help ensure the security of its systems and to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGJan 16 · first

Nebraska State AGJan 16 · first · this page

Maine State AG+1d

Massachusetts State AG+1d

New Hampshire State AG+4d

Vermont State AG+14d

Pattern: first filing Jan 16 (IN), last Jan 30 (VT) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/fe71955c-0e5f-4614-8616-4ca24a111d3e.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 16, 2026
Raw hash: dac2c02287a1c11306d0168afcfa5d5bfa4d83fb3db921f3d4a65d6f2694e18c

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityDaniel H Cook Associates Inc.

Victim entityDaniel H Cook Associates Inc.

Incidentdiscovered Oct 17, 2025

Stated responseEngaged cybersecurity experts to assist with the process

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov