HackingIdentity (basic)Government IDMediumContained

Pipestone

bd_78347de9aa436a46 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 7, 2026

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

67%

Full breach record for Pipestone →

Pipestone Holdings LLC notified Nebraska AG of a data security incident involving unauthorized access to a limited data set. The breach impacted individuals' names, Social Security numbers, dates of birth, and addresses. The company engaged third-party experts, secured its network, and offered 12 months of free credit monitoring via Cyberscout/TransUnion. No evidence of fraudulent misuse was found at the time of notice.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

May 7, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_5a9d5907508950ee2026-05-05 · +2dVerified by operator

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_29fd7f9ff642be292026-05-07Candidate
Indiana State AGbd_67f9d73387b68e2f2026-05-07Verified by operator

Name: Pipestone
norm: pipestone
Domain: pipestone.com

Name: Pipestone
norm: pipestone
Domain: pipestone.com

Discovered: —
Materiality determined: —
Notification sent: May 7, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Identified unusual activity in our network and took steps to secure our network
Hired third party experts to provide additional protection and to help us investigate the nature and scope of the event
Reviewed the impacted data set to determine the type of information that may have been impacted and to whom it relates
Offering credit monitoring services, free of charge, for anyone wishing to utilize
Strengthened our systems
Continued to engage third party experts for extra protection
Reviewing our processes to help prevent future events
Changes made: Strengthened our systems
Reviewing our processes to help prevent future events
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGMay 7 · first

Indiana State AGMay 7 · first

Nebraska State AGMay 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/aecbdd2e-1086-45bd-b492-74ef95dd7dcf.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 7, 2026
Raw hash: 4ef3592a944df04fcf4336440a27ad475fdd013c03a998e46c604f9d2644f9ae

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityPipestone

Victim entityPipestone

IncidentUnauthorized Access

Stated responseIdentified unusual activity in our network and took steps to secure our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov