AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedPIIIdentity (basic)LowActive

North Carolina Board of Examiners for Engineers and Surveyors

bd_63cbc6ba7ea8aef0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 13, 2026

Filed

Mar 9, 2026

To disclose

24 days

Affected

Not disclosed

Linked

4 filings

Confidence

67%

Full breach record for North Carolina Board of Examiners for Engineers and Surveyors →

North Carolina Board of Examiners for Engineers and Surveyors inadvertently sent sensitive personal information of its members to two third-party organizations on Feb 13, 2026. The Board has secured deletion confirmations and is notifying Idaho residents.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 24 days

Feb 13, 2026

Discovered

Mar 9, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Texas State AGbd_36e036f1ba11ec412026-05-19 · +71dVerified
Vermont State AGbd_4cb09b50e4659bb12026-05-19 · +71dVerified
Indiana State AGbd_ad7cd70a3c23946c2026-05-19 · +71dVerified

Name: North Carolina Board of Examiners for Engineers and Surveyors
norm: north carolina board of examiners for engineers and surveyors

Name: North Carolina Board of Examiners for Engineers and Surveyors
norm: north carolina board of examiners for engineers and surveyors
Industry: Governmentllm

Discovered: Feb 13, 2026
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1566 PhishingT1078 Valid Accounts
Regulator citations: Notified Idaho Attorney General's Consumer Protection Division

During the incident: Requested that both recipient organizations permanently delete the sensitive personal information
Received written declarations from these organizations confirming the same
In the process of identifying and providing notice to the affected individuals
Changes made: Taken steps to prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 days(24 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Idaho State AGMar 9 · first · this page

Texas State AG+71d

Vermont State AG+71d

Indiana State AG+71d

Pattern: first filing Mar 9 (ID), last May 19 (IN) — a 71-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2026/03/2026-03-09-North-Carolina-Board-of-Examiners-for-Engineers-and-Surveyors.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 9, 2026
Raw hash: 2cd5fcbedbeb2aded064fe2eb95c30c5801d0c4de3959a16cc46fed5743487b4

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityNorth Carolina Board of Examiners for Engineers and Surveyors

Victim entityNorth Carolina Board of Examiners for Engineers and Surveyors

Incidentdiscovered Feb 13, 2026

Stated responseRequested that both recipient organizations permanently delete the sensitive personal information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov