HackingPIIIdentity (basic)LowContained

SAPP BROS., INC.

bd_ca2961ea3cbfaa4b · schema v1 · pii pii-v2

Severity

Low

Discovered

Aug 25, 2025

Filed

Mar 24, 2026

To disclose

—

Affected

Not disclosed

Linked

7 records

Confidence

68%

Full breach record for SAPP BROS., INC. →

Sapp Bros Inc experienced a cybersecurity incident on August 25, 2025, where an attacker accessed network information. The breach involved PII, including names and demographic data. Sapp Bros engaged forensic and data experts, disabled affected accounts, reset passwords, revoked admin privileges, and enhanced MFA. Affected individuals were notified on March 2, 2026, and offered IDX identity theft protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 25, 2025

Discovered

Mar 24, 2026

Filed

This filing is one of 7 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteworldleaksbd_7939a74ec213ffe12025-08-29 · +207dVerified by operator

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_26d5a761af3d18342025-12-11 · +103dVerified
Iowa State AGbd_38355d5bb692b8b42025-12-11 · +103dVerified by operator
Nebraska State AGbd_09c4cf0374f2bb9c2025-12-10 · +104dVerified by operator
Indiana State AGbd_4454a912e8a386b52025-12-10 · +104dVerified

Show 1 more filing ↓up to 113d gap

Illinois State AGbd_3a667b52499e19e42025-12-01 · +113dVerified by operator

Name: SAPP BROS., INC.
norm: sapp bros
Domain: sappbros.net

Name: SAPP BROS., INC.
norm: sapp bros
Domain: sappbros.net

Discovered: Aug 25, 2025
Materiality determined: —
Notification sent: Mar 2, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Hired a cyber expert to investigate how the attack occurred and to secure the network
Engaged a data expert to conduct a programmatic and manual review
Immediately disabling the affected accounts and forcing a password reset
Revoking administrator privileges for service accounts
Installing enhanced threat detection software on certain servers
Enhancing our multi-factor authentication requirements
Offering identity theft protection services through IDX
Changes made: Working to implement additional technologies designed to prevent similar attacks including more extensive logging and real-time reporting
Exploring options for further hardening authentication standards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Illinois State AGDec 1 · first

Nebraska State AG+9d

Indiana State AG+9d

Montana State AG+10d

Iowa State AG+10d

Nebraska State AG+113d · this page

Pattern: first filing Dec 1 (IL), last Mar 24 (NE) — a 113-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/5441ee73-d525-4314-9ff0-eb16d462be53.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2026
Raw hash: 940186a492d6fe32332e9ba74ff8f0d9e9f11a4bf24fae8c79ba4858ee128e23

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entitySAPP BROS., INC.

Victim entitySAPP BROS., INC.

Incidentdiscovered Aug 25, 2025

Stated responseHired a cyber expert to investigate how the attack occurred and to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov