HackingIdentity (basic)Government IDMediumContained

First Atlantic Capital, Ltd.

bd_aa28d57e1c60b987 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Sep 18, 2025

Filed

Jan 30, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

69%

Full breach record for First Atlantic Capital, Ltd. →2 incidents on file

First Atlantic Capital, Ltd. notified Nebraska residents of a data security incident discovered on September 18, 2025. Unauthorized access to the network resulted in the exposure of names and Social Security numbers. The company engaged independent cybersecurity experts, secured the network, and offered complimentary credit monitoring and fraud assistance to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 18, 2025

Begins

Sep 18, 2025

Discovered

Jan 30, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_49bac84c4f681fa72026-01-30Candidate
Indiana State AGbd_678a16b9c812aa482026-01-30Verified
Vermont State AGbd_f0afccb96e750cbc2026-01-30Verified
New Hampshire State AGbd_f338d391f5f36b822026-02-02 · +3dVerified

Name: First Atlantic Capital, Ltd.
norm: first atlantic

Name: First Atlantic Capital, Ltd.
norm: first atlantic

Discovered: Sep 18, 2025
Breach occurred: Sep 18, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 30, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Took immediate steps to secure the network
Initiated an investigation with the assistance of independent cybersecurity experts
Conducted a thorough review of the affected information
Offering you Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGJan 30 · first

Indiana State AGJan 30 · first

Vermont State AGJan 30 · first

Nebraska State AGJan 30 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/ce247485-e025-4cd6-9b66-9261064d2654.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 30, 2026
Raw hash: 6e656caf523f7139cd106501d5dc1054470a75549e99638a2cf4f68060175bb6

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFirst Atlantic Capital, Ltd.

Victim entityFirst Atlantic Capital, Ltd.

Incidentdiscovered Sep 18, 2025

Stated responseTook immediate steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov