MalwareFinancial ServicesFinanceRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

Goosehead Insurance Agency, LLC

bd_8d4ed55c07e38b2e · schema v1 · pii pii-v2

Severity

Medium

Discovered

Mar 13, 2025

Filed

Oct 10, 2025

To disclose

—

Affected

24state residents only

Linked

6 filings

Confidence

66%

Full breach record for Goosehead Insurance Agency, LLC →

Goosehead Insurance Agency, LLC reported a cybersecurity incident to the Nebraska Attorney's Office. Between March 6 and March 13, 2025, an unauthorized actor accessed systems, encrypted files, and downloaded data. The incident affected 24 Nebraska residents, exposing names, Social Security numbers, driver's license numbers, and financial account information. Goosehead notified federal law enforcement, state regulators, and credit bureaus, and provided notices to affected individuals on October 10, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

Mar 6, 2025

Begins

Mar 13, 2025

Discovered

Oct 10, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_2451f938632655f52025-10-10Candidate
Maine State AGbd_de4a31fd4225ea182025-10-10Verified
Massachusetts State AGbd_54bc0ea249ad65212025-10-11 · +1dVerified
Texas State AGbd_b8e4dd4c5f08a06e2025-10-14 · +4dVerified by operator

Show 1 more filing ↓up to 9d gap

Illinois State AGbd_ffd85f9330873b052025-10-01 · +9dVerified

Name: Goosehead Insurance Agency, LLC
norm: goosehead insurance agency
Domain: goosehead.com

Name: Goosehead Insurance Agency, LLC
norm: goosehead insurance agency
Domain: goosehead.com
Industry: Financial Servicesllm

Discovered: Mar 13, 2025
Breach occurred: Mar 6, 2025 – Mar 13, 2025
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 10, 2025
Affected individuals: 24state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Provided written notice of this incident to relevant state regulators, as necessary

During the incident: Notified federal law enforcement
Provided written notice to relevant state regulators
Provided written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided information on how to place a fraud alert and security freeze on one’s credit file
Provided contact details for the national consumer reporting agencies
Provided information on how to obtain a free credit report
Changes made: Working to implement additional safeguards and training to its employees
Implemented additional technical security measures
Reviewing and enhancing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGOct 1 · first

Montana State AG+9d

Maine State AG+9d

Nebraska State AG+9d · this page

Massachusetts State AG+10d

Texas State AG+13d

Pattern: first filing Oct 1 (IL), last Oct 14 (TX) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/030549e8-1539-41bb-b4c5-3fb36b9710db.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 10, 2025
Raw hash: dde186f03eef6e9cea33e3d2ace45eb5ca3d4ba019d116ae4d59dc85f172d768

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityGoosehead Insurance Agency, LLC

Victim entityGoosehead Insurance Agency, LLC

Incidentdiscovered Mar 13, 2025

Stated responseNotified federal law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov