HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Rosehill Gardens

bd_e72589c91010fc17 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 2, 2026

Filed

Jul 8, 2026

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Rosehill Gardens →

Rosehill Gardens, Inc. notified the Nebraska AG of a data security event discovered on April 2, 2026. Unauthorized access resulted in the acquisition of files containing the name and Social Security number of one Nebraska resident. Notification was mailed on July 8, 2026, offering 12 months of credit monitoring via Cyberscout/TransUnion. The incident status is contained.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

Incident timeline

Apr 2, 2026

Discovered

Jul 8, 2026

Filed

This filing is one of 2 about the same incident.View merged incident

A leak claim by dragonforce about this victim predates this filing by 71 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitedragonforcebd_16677c13c3f776ce2026-04-27 · +71dCandidate

Name: Rosehill Gardens
norm: rosehill gardens
Domain: rosehillgardens.com

Name: Rosehill Gardens
norm: rosehill gardens
Domain: rosehillgardens.com
Industry: Professional Servicesllm

Discovered: Apr 2, 2026
Materiality determined: —
Notification sent: Jul 8, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
Threat actor: External
Regulator citations: Notified Nebraska Attorney General

During the incident: Took steps to secure its network
Engaged independent cybersecurity experts to investigate
Undertook a comprehensive review of those files
Notified the identified individuals
Mailed a notification letter to the identified Nebraska resident by USPS First Class Mail
Offering complimentary identity protection services that will be provided by Cyberscout, a TransUnion company
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/41fff735-8c8e-4968-9eae-841b9c6c33c4.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 8, 2026
Raw hash: b96f9a670ad02ca0507d1a9f9ba0b94a6f4b5674d1f85343f44fe1fba7445304

Linked disclosures

Ransomware claims (1)

Reporting entityRosehill Gardens

Victim entityRosehill Gardens

Incidentdiscovered Apr 2, 2026

Stated responseTook steps to secure its network

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov