MalwareOtherRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Nebraska Irrigation

bd_d76b24a291f4d19a · schema v1 · pii pii-v2

Severity

Medium

Discovered

Apr 9, 2025

Filed

Jun 10, 2025

To disclose

—

Affected · nationwide

5443 in this filing

Linked

3 filings

Confidence

67%

Full breach record for Nebraska Irrigation →

Nebraska Irrigation Inc. reported a cybersecurity incident involving unauthorized access and encryption of systems, potentially exposing employee and customer data. The breach affected 54 individuals total (43 Nebraska residents). Data types included names, SSNs, DOB, driver's license numbers, financial account info, and limited medical info. Notifications were sent on May 19, 2025, with supplemental notices on June 10, 2025. The company offered 12 months of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

Apr 9, 2025

Discovered

Jun 10, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 125 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_125838c0a9a57b402025-02-05 · +125dVerified by operator

Regulatory filings (1) · sorted by filing gap

Nebraska State AGbd_37d93a10a4c194ce2025-05-19 · +22dVerified by operator

Name: Nebraska Irrigation
norm: nebraska irrigation
Domain: nebraskairrigation.com

Name: Nebraska Irrigation
norm: nebraska irrigation
Domain: nebraskairrigation.com
Industry: Otherllm

Discovered: Apr 9, 2025
Materiality determined: —
Notification sent: May 19, 2025
Affected individuals: 54state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Secured the systems
Implemented incident response protocols
Launched an investigation
Mailed additional notification letters via First-Class mail
Established a dedicated, toll-free call center
Changes made: Enhance its existing security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

Nebraska State AGMay 19 · first

Nebraska State AG+22d · this page

Pattern: first filing May 19 (NE), last Jun 10 (NE) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/233675a1-3065-4776-b46e-3f81117f6b48.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 10, 2025
Raw hash: fa2561fb3d802403d205fcf3397a2b211791fa475f1b19d318a8546594de1233

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityNebraska Irrigation

Victim entityNebraska Irrigation

Incidentdiscovered Apr 9, 2025

Stated responseSecured the systems

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov