HackingTechnologyInformationCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Birdair, Inc.

bd_b142d3102220a6b7 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Oct 28, 2024

Filed

Jun 20, 2025

To disclose

—

Affected

2state residents only

Linked

9 filings

Confidence

67%

Full breach record for Birdair, Inc. →3 incidents on file

Birdair, Inc. reported a data security incident to the Nebraska Attorney General on June 23, 2025. The company discovered unauthorized access to files on October 28, 2024, and determined on May 28, 2025, that personal information of 2 Nebraska residents was involved. Impacted data included names, DOB, driver's license numbers, financial account info, health insurance info, TIN, medical info, passport numbers, and SSNs. Birdair notified the FBI, engaged cybersecurity experts, and offered credit monitoring via TransUnion/Cyberscout.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

Incident timeline

Oct 28, 2024

Discovered

Jun 20, 2025

Filed

This filing is one of 9 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 239 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (3)

Leak Siteplaybd_915278459711e1612024-10-27 · +236dVerified by operator
Leak Sitelockbit_3bd_94f68bc939d7404f2024-10-27 · +236dVerified by operator
Leak Siteplaybd_cf06740cb875d0a52024-10-24 · +239dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_22ce26088ba7cca92025-06-20Verified by operator
Massachusetts State AGbd_51d9d1d798605b242025-06-21 · +1dVerified by operator
Maine State AGbd_d680b2239f7913962025-06-23 · +3dVerified
Vermont State AGbd_e90f70f1600b0d1e2025-06-23 · +3dVerified by operator

Show 1 more filing ↓up to 3d gap

New Hampshire State AGbd_fa9d6c9ba21d55e22025-06-23 · +3dVerified by operator

Name: Birdair, Inc.
norm: birdair
Domain: birdair.com

Name: Birdair, Inc.
norm: birdair
Domain: birdair.com
Industry: Technologyllm

Discovered: Oct 28, 2024
Materiality determined: —
Notification sent: Jun 20, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: exploit_public_facing

During the incident: Engaged independent cybersecurity experts
Secured its network environment
Launched an investigation
Implemented measures to enhance the security of its environment
Provided notified individuals with information about steps they can take to protect their personal information
Offered them access to complimentary identity monitoring services
Established a toll-free call center through TransUnion
Notified the Federal Bureau of Investigation
Changes made: Implemented measures to enhance the security of its environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGJun 20 · first

Nebraska State AGJun 20 · first · this page

Massachusetts State AG+1d

Maine State AG+3d

Vermont State AG+3d

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/c745b53a-7e07-48a6-bff7-aeebc8d03dfb.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 20, 2025
Raw hash: 65a13c4f4b1f180c2f8dc71f0566a179165a7362bf3857c63f38c3e833323bb6

Linked disclosures

Ransomware claims (3)

Regulatory filings (5) · sorted by filing gap

Reporting entityBirdair, Inc.

Victim entityBirdair, Inc.

Incidentdiscovered Oct 28, 2024

Stated responseEngaged independent cybersecurity experts

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov