Social EngineeringGovernment IDIdentity (basic)Financial accountPHIMediumContained

Associated Truss Company

bd_7029a8da195a3057 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Feb 24, 2025

Filed

Jun 24, 2025

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

67%

Full breach record for Associated Truss Company →

Associated Truss Company (dba Associated Truss & Lumber) reported a data breach affecting 1 Nebraska resident (and 1 Rhode Island resident). On or about February 24, 2025, suspicious activity in an employee email account was discovered, leading to unauthorized access to the payroll system. Personal information, including names, SSNs, financial account info, and health insurance data, may have been accessed. The company engaged third-party specialists, secured accounts, and offered 12 months of credit monitoring and fraud assistance.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 24, 2025

Discovered

Jun 24, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Texas State AGbd_7ab016389eb097752025-06-30 · +6dCandidate

Name: Associated Truss Company
norm: associated truss

Name: Associated Truss Company
norm: associated truss
Also named: Associated Truss Companydba oflegal entity
Associated Truss & Lumberdba oftrade name

Discovered: Feb 24, 2025
Materiality determined: —
Notification sent: Jun 24, 2025
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial accountPHI
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Engaged third-party specialists to assist with determining the full nature and scope of the incident
Secured our email tenant and payroll system accounts
Conducted a thorough investigation
Offering you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Secured our email tenant and payroll system accounts
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Nebraska State AGJun 24 · first · this page

Texas State AG+6d

Pattern: first filing Jun 24 (NE), last Jun 30 (TX) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/7cacc656-e201-436f-a0a1-8991024c5908.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 24, 2025
Raw hash: dcd413100a0bc1b18eba0bb34b6a7c66abd4f8f1f0373d927ced50a9eeecce0d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAssociated Truss Company

Victim entityAssociated Truss Company

Incidentdiscovered Feb 24, 2025

Stated responseEngaged third-party specialists to assist with determining the full nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov