HackingOtherStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Dow Rummel Village

bd_cc63ccdc6442aa0f · schema v1 · pii pii-v2

Severity

Medium

Discovered

Nov 21, 2025

Filed

Feb 9, 2026

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for Dow Rummel Village →2 incidents on file

Dow Rummel Village reported a data breach to the Nebraska Attorney General involving one Nebraska resident. Unauthorized access to employee email accounts occurred between October 9 and November 24, 2025, discovered on November 21, 2025. The incident exposed names and Social Security numbers. Notifications were sent on February 9, 2026, offering 12 months of credit monitoring. Forensic investigation was conducted by CFC Response.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 43 days

Oct 9, 2025

Begins

Nov 21, 2025

Discovered

Feb 9, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Dow Rummel Village
norm: dow rummel village

Name: Dow Rummel Village
norm: dow rummel village
Industry: Otherllm

Discovered: Nov 21, 2025
Breach occurred: Oct 9, 2025 – Nov 24, 2025
Undetected for: 43 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 9, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1114 Email CollectionT1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took immediate action to secure its email environment
Engaged our law firm
Retained CFC Security, Inc. d/b/a/ CFC Response, a cyber forensics specialist firm, to assist us in our rendering of legal advice
Underwent a comprehensive data review to determine what information was involved and to whom it belonged
Ran a national-change-of-address (NCOA) search
Notified individuals via U.S. mail
Offered an opportunity to enroll in 12 months of complimentary credit monitoring and identity protection services through Cyberscout, a TransUnion company
Set up a professional call center through TransUnion to assist notified individuals with credit monitoring enrollments and to answer inquiries regarding the event
Changes made: Reviewing its existing security policies and protections
Adopting additional security to safeguard against evolving threats moving forward
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/4e221abd-d868-4428-8f6e-7f4a016fc3c9.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2026
Raw hash: d47c571f251c6f540f0aef527070390b98377ee6b42d6d7d47ce9d1a2cdcc93e

Reporting entityDow Rummel Village

Victim entityDow Rummel Village

Incidentdiscovered Nov 21, 2025

Stated responseTook immediate action to secure its email environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov