HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
NUCOR CORPORATION
bd_f0b0185bf1d1823b · schema v1 · pii pii-v1
Full breach record for NUCOR CORPORATION →Nucor Corporation notified Vermont AG of a cybersecurity incident where an unauthorized third party accessed and acquired personal information (including SSNs) from May 3-13, 2025. Nucor engaged forensic specialists, reported to law enforcement, implemented safeguards, and offered 2 years of Equifax credit monitoring.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_e8dd270c8f1b4b65Indiana State AGfiled 2025-06-24Verified
- bd_9461555a0a074d8aNew Hampshire State AGfiled 2025-06-27(3d gap)Verified
- bd_5d4a1347ab3beb1cSEC 8-Kfiled 2025-06-20(4d gap)Verified
- bd_70306daf12f7c0d8New Hampshire State AGfiled 2025-06-30(6d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-06-24-nucor-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 24, 2025
- Raw hash
- bc4100a628f346ad8ac91a4f1c7851414d993772c0e9d4b4f8562d3ee4de5f48
Reporting entity
- Name
- NUCOR CORPORATIONnorm: nucor
- Domain
- nucor.com
Victim entity
- Name
- NUCOR CORPORATIONnorm: nucor
- Domain
- nucor.com
Incident
- Discovered
- May 13, 2025
- Materiality determined
- Jun 24, 2025
- Notification sent
- Jun 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported the matter to law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.