HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

RSC Insurance Brokerage, Inc.

bd_eca52073313f9c26 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 15, 2026

Filed

Jun 23, 2026

To disclose

—

Affected

76state residents only

Linked

5 filings

Confidence

66%

Full breach record for RSC Insurance Brokerage, Inc. →5 incidents on file

RSC Insurance Brokerage, Inc. reported unauthorized access to a Microsoft 365 employee account between January 15-16, 2026. The incident exposed names and Social Security numbers of 76 Nebraska residents, with some individuals also having medical/insurance data compromised. Notifications were mailed on June 23, 2026, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 15, 2026

Begins

Jan 15, 2026

Discovered

Jun 23, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_209191863a5c7c062026-06-23Candidate
New Hampshire State AGbd_89b29f06a4852dc52026-06-23Verified
Massachusetts State AGbd_b7c116eba3e5a8222026-06-23Verified
Illinois State AGbd_3f071db39a66cf1f2026-06-01 · +22dVerified

Name: RSC Insurance Brokerage, Inc.
norm: rsc insurance brokerage

Name: RSC Insurance Brokerage, Inc.
norm: rsc insurance brokerage
Industry: Financial Servicesllm

Discovered: Jan 15, 2026
Breach occurred: Jan 15, 2026 – Jan 16, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 23, 2026
Affected individuals: 76state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Conducted a thorough investigation
Mailed notification letters via U.S. First-Class mail to the Nebraska residents
Offered one year of complimentary credit monitoring and identity theft protection services
Established a toll-free call center to answer questions
Changes made: Taken steps to further strengthen its existing security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGJun 1 · first

Indiana State AG+22d

New Hampshire State AG+22d

Massachusetts State AG+22d

Nebraska State AG+22d · this page

Pattern: first filing Jun 1 (IL), last Jun 23 (NE) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/b9808fde-3dad-4a47-b9ec-0e8f84edce88.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 23, 2026
Raw hash: 8b15a75a8bbeebbea69133a23598a2be71ada0f8cf3cff99f2ea39b47e7f067a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityRSC Insurance Brokerage, Inc.

Victim entityRSC Insurance Brokerage, Inc.

Incidentdiscovered Jan 15, 2026

Stated responseConducted a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov