HackingEducationEducationData ExfiltratedCustomer Data InvolvedIdentity (basic)PIILowActive

Empowerment Schools - Healthcare Ltd

bd_672b61a898774068 · schema v1 · pii pii-v2

Severity

Low

Discovered

Aug 21, 2025

Filed

Feb 27, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for Empowerment Schools - Healthcare Ltd →

Empowerment Schools Healthcare Ltd and Texas Medical Careers Limited (CHCP) notified affected individuals of a data breach occurring between August 16-20, 2025, discovered on August 21, 2025. An unauthorized third party accessed and potentially downloaded files containing names and addresses of students, employees, and relatives. Notices were sent on January 30, 2026, offering credit monitoring. The incident status is active.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

Aug 16, 2025

Begins

Aug 21, 2025

Discovered

Feb 27, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_fca797062d8b5e752026-02-27Candidate
Maine State AGbd_794379bfcc02435b2026-03-26 · +27dVerified by operator
Massachusetts State AGbd_e2af08a3932a49bf2026-03-26 · +27dVerified
Texas State AGbd_61ee676e5912b6dd2026-03-27 · +28dVerified by operator

Name: Empowerment Schools - Healthcare Ltd
norm: empowerment schools healthcare

Name: Empowerment Schools - Healthcare Ltd
norm: empowerment schools healthcare
Industry: Educationllm

Discovered: Aug 21, 2025
Breach occurred: Aug 16, 2025 – Aug 20, 2025
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 30, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Law enforcement was notified
Initial access: exploit_public_facing

During the incident: Took portions of our network offline
Isolated the affected systems
Began an investigation into the activity
Outside cyber professionals promptly investigated
Reset passwords
Implemented additional technical and organizational protection measures
Enhanced the security of our systems
Law enforcement was notified
Security team and third-party cyber professionals continue to monitor our systems 24/7
Changes made: Reset passwords
Implemented additional technical and organizational protection measures
Enhanced the security of our systems
Offering free credit monitoring and $1 million in identity theft insurance through Experian
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGFeb 27 · first

Nebraska State AGFeb 27 · first · this page

Maine State AG+27d

Massachusetts State AG+27d

Texas State AG+28d

Pattern: first filing Feb 27 (IN), last Mar 27 (TX) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/6f32fd73-8edc-450f-bbd2-2b0be1f9cc2c.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 27, 2026
Raw hash: c357f11b93244edb5a3c41ce4ed0ea922953616547c462c2aef46df150aef593

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEmpowerment Schools - Healthcare Ltd

Victim entityEmpowerment Schools - Healthcare Ltd

Incidentdiscovered Aug 21, 2025

Stated responseTook portions of our network offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov