MalwareIdentity (basic)Government IDCredentialsMediumContained

Estrella Franchising, LLC

bd_7354da2d856488aa · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jan 22, 2025

Filed

Mar 3, 2025

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for Estrella Franchising, LLC →

Estrella Franchising, LLC d/b/a Estrella Insurance reported a ransomware incident on January 22, 2025, affecting personal information including names, SSNs, driver's license numbers, and online account credentials. The company reset passwords, restored backups, engaged forensic experts, and notified law enforcement. Affected individuals received 24 months of Experian IdentityWorks services. The notice was filed with the Nebraska AG on March 3, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 22, 2025

Begins

Jan 22, 2025

Discovered

Mar 3, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_579714af179e3b712025-03-03Candidate
Massachusetts State AGbd_7aa63a9c098f1c0d2025-03-03Verified
Indiana State AGbd_c4ee8fadef7f2ce92025-03-03Verified
Maryland State AGbd_f03d024fde018a942025-03-03Verified

Name: Estrella Franchising, LLC
norm: estrella franchising

Name: Estrella Franchising, LLC
norm: estrella franchising
Also named: Estrella Franchising, LLCdba oflegal entity
Estrella Insurancedba oftrade name

Discovered: Jan 22, 2025
Breach occurred: Jan 22, 2025 – Jan 22, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 3, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDCredentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement and is cooperating with their investigation

During the incident: Resetting passwords
Restoring files from backup data
Enhancing security safeguards
Retaining outside legal and forensic experts to assist
Notified law enforcement and is cooperating with their investigation
Changes made: Worked with external cybersecurity experts to resolve the incident and enhance its security safeguards
Retained Experian to provide you with 24 months of identity protection services at no cost to you
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGMar 3 · first

Massachusetts State AGMar 3 · first

Indiana State AGMar 3 · first

Maryland State AGMar 3 · first

Nebraska State AGMar 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/2025-03-03 - Estrella - Individual Notice Template.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 3, 2025
Raw hash: 358b1879048e8e36918860fe971a13a0a113393a6f908fa4b0090a4a5ac0ac5d

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEstrella Franchising, LLC

Victim entityEstrella Franchising, LLC

Incidentdiscovered Jan 22, 2025

Stated responseResetting passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov