HackingManufacturingManufacturingStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

HYTORC Division of UNEX Corporation

bd_74d8b22fa9577c4d · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jan 5, 2026

Filed

Feb 5, 2026

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for HYTORC Division of UNEX Corporation →

HYTORC Division of UNEX Corporation reported a data security incident to the Nebraska Attorney General on February 5, 2026. The incident, occurring on November 2, 2025, involved unauthorized access to files containing a Nebraska resident's name and Social Security number. One resident was notified and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 64 days

Nov 2, 2025

Begins

Jan 5, 2026

Discovered

Feb 5, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_3c7fd8391998b4942026-02-05Verified
Indiana State AGbd_76710a9ddb07df4d2026-02-05Candidate

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: HYTORC Division of UNEX Corporation
norm: hytorc division of unex
Industry: Manufacturingllm

Discovered: Jan 5, 2026
Breach occurred: Nov 2, 2025
Undetected for: 64 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 5, 2026
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Retained cybersecurity experts and launched a forensics investigation
Implemented additional security measures to further harden its environment
Notifying the affected individuals
Offering affected individuals complimentary credit monitoring and identity protection services through Cyberscout
Changes made: Implemented additional security measures to further harden its environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGFeb 5 · first

Indiana State AGFeb 5 · first

Nebraska State AGFeb 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/d0df2fe0-5b94-4317-ab5f-0423c8ec6b60.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 5, 2026
Raw hash: fe0b2a0bbb564b5ce85b5542db868502dc75824c479788ae120536405dc505bd

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityHYTORC Division of UNEX Corporation

Incidentdiscovered Jan 5, 2026

Stated responseRetained cybersecurity experts and launched a forensics investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov