HackingPIIIdentity (basic)LowContained

Upstaging, Inc.

bd_bc210654b238d291 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 2, 2026

Filed

Aug 5, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for Upstaging, Inc. →

Upstaging, Inc. notified Nebraska residents of a data breach occurring between May 28 and June 2, 2026, discovered on June 2, 2026. Unauthorized access resulted in the copying of personal information. Upstaging retained forensic specialists and legal counsel, and is offering 12 months of credit monitoring and fraud assistance via TransUnion to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

May 28, 2026

Begins

Jun 2, 2026

Discovered

Aug 5, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebooba_projectbd_055a08957f5755c02026-07-06 · +30dVerified by operator

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_106bdd27cdea57b12026-08-05Verified
Massachusetts State AGbd_9d7d9e4bd9098af52026-08-05Candidate
Massachusetts State AGbd_51fbb723f6b741872025-11-11 · +267dVerified by operator

Name: Upstaging, Inc.
norm: upstaging
Domain: upstaging.com

Name: Upstaging, Inc.
norm: upstaging
Domain: upstaging.com

Discovered: Jun 2, 2026
Breach occurred: May 28, 2026 – Jun 2, 2026
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 5, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: ExternalFinancial

During the incident: Retained legal counsel and third-party forensic specialists to investigate the unusual activity
Began a comprehensive review of the data set to determine what sensitive and/or personal information was potentially impacted
Notified potentially impacted individuals
Provided access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Provided proactive fraud assistance through TransUnion
Changes made: Provided 12 months of credit monitoring services
Provided proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Massachusetts State AGNov 11 · first

New Hampshire State AG+267d

Massachusetts State AG+267d

Nebraska State AG+267d · this page

Pattern: first filing Nov 11 (MA), last Aug 5 (NE) — a 267-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/9b539ba9-8184-41ed-9742-c78743452d75.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 5, 2026
Raw hash: 4547b1dc332ce860c7834cb2ce2a5a540c7a89b118e5d5a7c757c020215ccd1d

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityUpstaging, Inc.

Victim entityUpstaging, Inc.

Incidentdiscovered Jun 2, 2026

Stated responseRetained legal counsel and third-party forensic specialists to investigate the unusual activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov