HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTIDENTITY_BASICMediumContained
NUCOR CORPORATION
bd_70306daf12f7c0d8 · schema v1 · pii pii-v1
Full breach record for NUCOR CORPORATION →Nucor Corporation reported unauthorized access to IT systems affecting one New Hampshire resident. The incident occurred between May 3 and May 13, 2025, and was detected on May 13, 2025. Data accessed included SSN, corporate credit card number, and DOB. Nucor engaged third-party cybersecurity specialists, notified law enforcement, and provided 24 months of credit monitoring. Additional technical safeguards were implemented.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_9461555a0a074d8aNew Hampshire State AGfiled 2025-06-27(3d gap)Verified
- bd_e8dd270c8f1b4b65Indiana State AGfiled 2025-06-24(6d gap)Verified
- bd_f0b0185bf1d1823bVermont State AGfiled 2025-06-24(6d gap)Candidate
- bd_5d4a1347ab3beb1cSEC 8-Kfiled 2025-06-20(10d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/nucor-corporation-20250630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2025
- Raw hash
- 2f666c5f7957d00296c8cc48f0c49cac82c3f6e1a14d531a3cc669060666147a
Reporting entity
- Name
- NUCOR CORPORATIONnorm: nucor
- Domain
- nucor.com
Victim entity
- Name
- NUCOR CORPORATIONnorm: nucor
- Domain
- nucor.com
Incident
- Discovered
- May 13, 2025
- Materiality determined
- Jun 16, 2025
- Notification sent
- Jun 24, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTFINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Office of the Attorney General, New Hampshire
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.