HackingGovernmentGovernmentData EncryptedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Government IDMinorMediumContained

City of Mission

bd_82c5948066b66b77 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Feb 28, 2025

Filed

Feb 13, 2026

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for City of Mission →

City of Mission (Nebraska) notified individuals of a data breach detected on February 28, 2025. An unauthorized third party gained access to the network for a few days in late February 2025. The incident involved ransomware (file decryption) and data exfiltration. Impacted data included personal information (PII), potentially including government IDs and minor data. The City engaged third-party experts, law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 28, 2025

Begins

Feb 28, 2025

Discovered

Feb 13, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_5c36b7de27a05d852026-02-13Candidate
Texas State AGbd_5ba925971051863b2026-02-17 · +4dVerified by operator

Name: City of Mission
norm: city of mission

Name: City of Mission
norm: city of mission
Industry: Governmentllm

Discovered: Feb 28, 2025
Breach occurred: Feb 28, 2025 – Mar 2, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDMinor
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: notified law enforcement
Initial access: exploit_public_facing

During the incident: Worked with third-party cybersecurity experts to investigate and remediate that activity
Issued multiple press releases with updates about this event
Worked with experts to decrypt those files
Engaged a data-review firm to analyze their contents
Notified law enforcement
Changes made: Further secure our systems to protect your information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGFeb 13 · first

Nebraska State AGFeb 13 · first · this page

Texas State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/b31f2582-8852-434b-a66f-0f787b98476c.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 13, 2026
Raw hash: 24d60f5d7a84bc9af5410c4a0a8bf1c8779a010a4732132186b1f85b0064caaa

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCity of Mission

Victim entityCity of Mission

Incidentdiscovered Feb 28, 2025

Stated responseWorked with third-party cybersecurity experts to investigate and remediate that activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov