HackingRetail & ConsumerRetailData ExfiltratedIdentity (basic)LowContained

Apro, LLC

bd_cb4ed0be09dddd5f · schema v1 · pii pii-v2

Severity

Low

Discovered

May 24, 2025

Filed

Dec 29, 2025

To disclose

—

Affected

Not disclosed

Linked

11 filings

Confidence

65%

Full breach record for Apro, LLC →3 incidents on file

Apro, LLC (dba United Pacific) notified Nebraska residents of a data breach occurring May 23-24, 2025. An unauthorized third party accessed systems and exfiltrated files containing names. Discovery was confirmed on May 24, 2025. Notices were sent December 29, 2025. Cybersecurity firms were engaged, and Experian IdentityWorks membership was offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

May 23, 2025

Begins

May 24, 2025

Discovered

Dec 29, 2025

Filed

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Nebraska State AGbd_012484720eafaaa92025-12-29Verified
Oregon State AGbd_16389e96311185da2025-12-29Candidate
California State AGbd_5a2af9e1606bffab2025-12-29Verified
Massachusetts State AGbd_68418fa12605f1862025-12-29Verified

Show 6 more filings ↓

Washington State AGbd_92a219fd595ad40f2025-12-29Verified
Washington State AGbd_9b890dc299bb37f82025-12-29Verified
Maine State AGbd_a14649851a366e8c2025-12-29Verified
Indiana State AGbd_bc689181dec5de1d2025-12-29Candidate
Indiana State AGbd_c87591ff1ff51cdd2025-12-29Verified
California State AGbd_e2ae2834649e791a2025-12-29Verified

Name: Apro, LLC
norm: apro

Name: Apro, LLC
norm: apro
Also named: Apro, LLCdba oflegal entity
United Pacificdba oftrade name
Industry: Retail & Consumerllm

Discovered: May 24, 2025
Breach occurred: May 23, 2025 – May 24, 2025
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 29, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Launched an investigation
Engaged leading cybersecurity firms to assist
Review of the files involved to identify individuals whose personal information may have been contained in the files
Offering you a complimentary [12/24]-month membership of Experian IdentityWorks
Changes made: Implemented additional measures to further enhance the security of its systems and data
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 7 states

View merged incident ↗

Nebraska State AGDec 29 · first

Oregon State AGDec 29 · first

California State AGDec 29 · first

Massachusetts State AGDec 29 · first

Washington State AGDec 29 · first

Maine State AGDec 29 · first

Indiana State AGDec 29 · first

California State AGDec 29 · first

Nebraska State AGDec 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/bbcab1b5-15bd-429f-a92d-9844fa818f80.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 29, 2025
Raw hash: 507c13b74b07889f31c682e739a3cb42ace1a4131a345b9c6c83ff0e86575d4d

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityApro, LLC

Victim entityApro, LLC

Incidentdiscovered May 24, 2025

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov