HackingTechnologyInformationVulnerability ExploitZero-DayData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

HYPERTHERM, INC.

bd_9e69ef6ff97b604f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 10, 2026

Filed

Mar 13, 2026

To disclose

—

Affected

67state residents only

Linked

3 filings

Confidence

66%

Full breach record for HYPERTHERM, INC. →2 incidents on file

Hypertherm, Inc. notified Nebraska residents that an unauthorized actor exploited a previously unknown vulnerability (zero-day) in Oracle E-Business Suite in August 2025 to exfiltrate data. The breach affected 67 Nebraska residents, exposing names and Social Security numbers. Hypertherm discovered the incident on February 10, 2026, and began mailing notifications on March 13, 2026. Response actions included engaging Kroll for credit monitoring, applying Oracle's security patch, and securing the EBS implementation.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

undetected · 193 days

Aug 1, 2025

Begins

Feb 10, 2026

Discovered

Mar 13, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

A leak claim by cl0p about this victim predates this filing by 111 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_47f76f7378a66e172026-03-13Verified
Texas State AGbd_83bd71a5d57601122026-03-16 · +3dCandidate

Name: HYPERTHERM, INC.
norm: hypertherm
Domain: hypertherm.com

Name: HYPERTHERM, INC.
norm: hypertherm
Domain: hypertherm.com
Industry: Technologyllm

Discovered: Feb 10, 2026
Breach occurred: Aug 1, 2025
Undetected for: 193 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 13, 2026
Affected individuals: 67state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Implemented its response procedures
Took measures to secure its implementation of Oracle EBS
Launched an investigation
Secured the services of Kroll to provide identity monitoring
Established a dedicated, toll-free call center
Changes made: Applied the patch that Oracle developed for Oracle EBS after the vulnerability was discovered
Took other measures to secure its Oracle EBS implementation
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGMar 13 · first

Nebraska State AGMar 13 · first · this page

Texas State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/a99e2a72-3fef-4943-873d-cf4268a7f1b2.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2026
Raw hash: 86795043584c9cd1153a3c489ee25c49ea091f2b097a8164f95201f67bccde95

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHYPERTHERM, INC.

Victim entityHYPERTHERM, INC.

Incidentdiscovered Feb 10, 2026

Stated responseImplemented its response procedures

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov