HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Shaw Lundquist Associates Inc

bd_b1389917f480c27e · schema v1 · pii pii-v2

Severity

Medium

Discovered

Oct 1, 2024

Filed

Nov 12, 2025

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Shaw Lundquist Associates Inc →

Shaw Lundquist Associates Inc (SLA) notified Nebraska AG that an unauthorized actor accessed employee email accounts in October 2024, potentially viewing or copying names, SSNs, and driver's license numbers. SLA notified one Nebraska resident on November 12, 2025, and provided 12 months of credit monitoring via Kroll. SLA secured email accounts and enhanced security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 1, 2024

Begins

Oct 1, 2024

Discovered

Nov 12, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_0ff989b3b3f090d32025-11-12Candidate

Name: Shaw Lundquist Associates Inc
norm: shaw lundquist associates

Name: Shaw Lundquist Associates Inc
norm: shaw lundquist associates
Industry: Professional Servicesllm

Discovered: Oct 1, 2024
Breach occurred: Oct 1, 2024 – Oct 31, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 12, 2025
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Conducted a comprehensive investigation of its email environment
Conducted a thorough review of the potential data
Notifying those individuals
Providing access to credit monitoring services for 12 months, through Kroll
Changes made: Securing employee email accounts
Evaluating and enhancing existing cyber security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGNov 12 · first

Nebraska State AGNov 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/adec9495-c145-4d44-be37-0e84256ad219.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2025
Raw hash: c35763cdc9f7670cd48c618dcd016e57e4bbf7aba688caddcec902d7b8946cf1

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityShaw Lundquist Associates Inc

Victim entityShaw Lundquist Associates Inc

Incidentdiscovered Oct 1, 2024

Stated responseConducted a comprehensive investigation of its email environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov