HackingGovernment IDIdentity (basic)MediumContained

Wabi Sabi Behavioral Health Center LLC

bd_9af8d8793e9f22ed · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 15, 2026

Filed

Jun 25, 2026

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Wabi Sabi Behavioral Health Center LLC →

Wabi Sabi Behavioral Health Center LLC notified Nebraska residents of a data breach occurring on June 15, 2026. Unauthorized access to a QuickBooks Online account was gained via compromised credentials from a third-party account. The incident exposed employee names, addresses, and Social Security numbers. The company secured accounts, engaged Intuit and Kroll for investigation and identity monitoring, and confirmed access was removed.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 15, 2026

Begins

Jun 15, 2026

Discovered

Jun 25, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Wabi Sabi Behavioral Health Center LLC
norm: wabi sabi behavioral health center

Name: Wabi Sabi Behavioral Health Center LLC
norm: wabi sabi behavioral health center

Discovered: Jun 15, 2026
Breach occurred: Jun 15, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 25, 2026
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Secured the affected accounts
Worked with Intuit to investigate the incident
Confirmed that the unauthorized access has been removed
Secured the services of Kroll to provide identity monitoring at no cost to you for 12 months
Changes made: Secured the affected accounts
Worked with Intuit to investigate the incident
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/5b6df4d7-7980-4a19-914d-832e0e8ef26f.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 25, 2026
Raw hash: a994b9bb1b1b96e3ae0a010d6ceec6e51a99adc308bdd6362acc33e85eeda418

Reporting entityWabi Sabi Behavioral Health Center LLC

Victim entityWabi Sabi Behavioral Health Center LLC

Incidentdiscovered Jun 15, 2026

Stated responseSecured the affected accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov