HackingOtherData ExfiltratedPIIIdentity (basic)LowContained

New Apostolic Church USA

bd_9f33fa85e1d59e85 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 29, 2025

Filed

Jun 26, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for New Apostolic Church USA →

New Apostolic Church USA notified Nebraska residents of a security incident where an unauthorized third party accessed and copied files from internal systems between October 25 and October 29, 2025. The breach involved personal information including names. The organization engaged external cybersecurity experts, contained the incident, and offered complimentary credit monitoring through Epiq. Notification letters were issued on May 29, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

Oct 25, 2025

Begins

Oct 29, 2025

Discovered

Jun 26, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_276b6402ff1889852026-06-26Verified
Indiana State AGbd_5b936fbfd617569d2026-06-26Verified
Vermont State AGbd_b1f5863980a39fa22026-06-26Verified
Massachusetts State AGbd_1ea46f28c47a7ae72026-06-27 · +1dCandidate

Name: New Apostolic Church USA
norm: new apostolic church usa
Domain: nac-usa.org

Name: New Apostolic Church USA
norm: new apostolic church usa
Domain: nac-usa.org
Industry: Otherllm

Discovered: Oct 29, 2025
Breach occurred: Oct 25, 2025 – Oct 29, 2025
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 29, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External

During the incident: Worked closely with external cybersecurity experts to investigate, contain, and remediate the incident
Confirm the security of our network environment
Implement additional safeguards
Enroll in complimentary credit monitoring and identity protection services for 12/24 months, at no cost to you, through Epiq
Changes made: Confirm the security of our network environment
Implement additional safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGJun 26 · first

Indiana State AGJun 26 · first

Vermont State AGJun 26 · first

Nebraska State AGJun 26 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/40a495d8-9fd8-4914-b6c0-d45f213e6a49.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2026
Raw hash: a230e4873678368825e6e1921a25e080d655ba2d9351ea283f9da6720dac44e9

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityNew Apostolic Church USA

Victim entityNew Apostolic Church USA

Incidentdiscovered Oct 29, 2025

Stated responseWorked closely with external cybersecurity experts to investigate, contain, and remediate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov