HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

Hamill & Kaplan, LLP

bd_905af269c9b1b431 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Sep 19, 2025

Filed

Aug 3, 2026

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

68%

Full breach record for Hamill & Kaplan, LLP →2 incidents on file

Hamill & Kaplan, LLP, a law firm, notified affected individuals in Nebraska of a data breach discovered on September 19, 2025. An unauthorized user gained access to the firm's computer network, potentially accessing sensitive personal information including Social Security numbers, government IDs, names, and bank account information. The firm engaged third-party IT specialists, enhanced network security, and notified the FBI, IRS, and Secret Service. No evidence of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 19, 2025

Begins

Sep 19, 2025

Discovered

Aug 3, 2026

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_9eeeca204cf281aa2026-08-06 · +3dCandidate

Name: Hamill & Kaplan, LLP
norm: hamill kaplan

Name: Hamill & Kaplan, LLP
norm: hamill kaplan
Industry: Professional Servicesllm

Discovered: Sep 19, 2025
Breach occurred: Sep 19, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 3, 2026
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the FBI, IRS, Franchise Tax Board, and Secret Service of this incident
Initial access: valid_credentials

During the incident: Engaged third-party IT specialists to determine the full nature and scope of this incident
Hired a third party to perform a thorough review of our systems to investigate the incident and enhance our network security
Continue our work with outside cybersecurity experts to reinforce our systems and security protocols
Notified the FBI, IRS, Franchise Tax Board, and Secret Service of this incident
Changes made: Ensured our network was secure
Enhance our network security
Reinforce our systems and security protocols in an effort to prevent incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Nebraska State AGAug 3 · first · this page

California State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/6ebb6779-f24e-4c27-89f0-877dd9c965a4.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2026
Raw hash: c589cbe302b60ef58b16109f3762c4101b84ee54e2e83d3ca9f1951b9d3934c1

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHamill & Kaplan, LLP

Victim entityHamill & Kaplan, LLP

Incidentdiscovered Sep 19, 2025

Stated responseEngaged third-party IT specialists to determine the full nature and scope of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov