HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Hawaii Unified

bd_d1869588922ba3e1 · schema v1 · pii pii-v2

Severity

Medium

Discovered

May 23, 2025

Filed

Jul 21, 2025

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Hawaii Unified →

Hawaii Unified Industries, LLC reported a data security incident to the Nebraska Attorney General on July 17, 2025. The company discovered unauthorized access to its IT systems on May 23, 2025. The investigation determined that an unauthorized user accessed files containing employees' personal information, including names, addresses, dates of birth, and Social Security numbers. One Nebraska resident was notified. The company engaged forensic specialists, implemented additional security safeguards, and offered 12 months of credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

Incident timeline

May 23, 2025

Discovered

Jul 21, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

A leak claim by embargo about this victim predates this filing by 48 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteembargobd_25001117f48d44282025-06-02 · +49dCandidate

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_d8190a941c9034782025-07-21Verified by operator

Name: Hawaii Unified
norm: hawaii unified
Domain: hawaiiunified.com

Name: Hawaii Unified
norm: hawaii unified
Domain: hawaiiunified.com
Industry: Manufacturingllm

Discovered: May 23, 2025
Materiality determined: —
Notification sent: Jul 21, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Implemented their incident response protocols
Engaged independent forensic computer specialists to assist in conducting an investigation
Implemented additional safeguards and technical security measures to further protect and monitor their systems
Offered 12 months of credit monitoring and identity protection services through Cyberscout, a TransUnion company
Changes made: Implemented additional safeguards and technical security measures to further protect and monitor their systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJul 21 · first

Nebraska State AGJul 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/c41b00cc-5c55-46ac-8184-3aea7817ec03.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2025
Raw hash: fc65951455a4d9eb5d1d40090f431e840b33a2cf7482e2f8437be4e4ff3d6089

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityHawaii Unified

Victim entityHawaii Unified

Incidentdiscovered May 23, 2025

Stated responseImplemented their incident response protocols

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov