HackingCustomer Data InvolvedIDENTITY_BASICHEALTH_BASICFINANCIALLowContained

Pediatric Products, LLC

bd_bfee4538ad5be153 · schema v1 · pii pii-v1

Full breach record for Pediatric Products, LLC →

Pediatric Products, LLC notified customers of a cybersecurity incident discovered on February 17, 2026. An unauthorized individual gained access to the network and may have accessed files containing names, addresses, dates of birth, diagnosis codes, insurance information, and identification numbers. The company took the network offline, engaged forensic experts, and implemented additional security measures.

Leak gap clock⏱ Leak >30d8 weeks discovery → filing

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_5458c411e1f89408Texas State AGfiled 2026-04-14Candidate
bd_8c7826422e859da3Washington State AGfiled 2026-04-14Verified

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-621730
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2026
Raw hash: 28ed2ebf281bf86325b4bfe45139bc8c213ebdb0ae6347dcf5573c25bec2c7b4

Reporting entity

Name: Pediatric Products, LLC
norm: pediatric products
Domain: xpressnebs.com

Victim entity

Name: Pediatric Products, LLC
norm: pediatric products
Domain: xpressnebs.com

Incident

Discovered: Feb 17, 2026
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICHEALTH_BASICFINANCIAL
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

Compliance

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.