Got a notice from Integrity Testing and Safety Administrators? Here’s what to do.

Your checklist

1. 1

   Keep the letter

   Save the notice from Integrity Testing and Safety Administrators and its envelope. The date you were told can matter for legal deadlines.

2. 2

   Freeze your credit

   The filing does not list what was taken, so play it safe. A free freeze at Equifax, Experian and TransUnion stops new accounts being opened in your name.

3. 3

   Change reused passwords

   Change any password you used with this company or reused elsewhere, and turn on two-factor sign-in.

4. 4

   Get a free claim review

   Our legal team checks whether you can be paid for this breach. No fee unless you recover.

About the Integrity Testing and Safety Administrators breach

Reported to

Nebraska Attorney General

Date filed

August 15, 2025

People notified

Not stated

Cause in filing

Not stated

Integrity Testing and Safety Administrators operates at the critical intersection of workplace health, regulatory compliance, and personnel management, providing specialized administrative services such as drug and alcohol testing, occupational health screenings, fitness-for-duty evaluations, and safety compliance tracking for employers across multiple industries. Because of the nature of these operations, the organization functions as a massive repository of deeply intimate, highly regulated personal data. Employers contract with companies like Integrity Testing and Safety Administrators to manage sensitive employee and applicant records, meaning the firm holds mountains of confidential health information, employment screening results, and foundational identifying details for workers who never had a direct business relationship with the administrator itself. In 2025, Integrity Testing and Safety Administrators formally reported a significant security incident to the Nebraska Attorney General's office, alerting affected individuals that their private records had been compromised in a cyberattack. While the exact mechanics of data breaches targeting occupational health and safety administrators often involve sophisticated ransomware deployment, unauthorized network intrusion, or the compromise of third-party vendor systems, the fundamental vulnerability stems from inadequate administrative and technical safeguards. When organizations managing high-value, sensitive medical and employment databases fail to implement robust multi-factor authentication, rigorous network segmentation, and continuous threat monitoring, malicious actors can easily infiltrate systems and harvest terabytes of confidential records without immediate detection. The data exposed in this breach represents a dangerous constellation of personally identifiable information (PII) and protected health information (PHI). Victims face the exposure of full names, dates of birth, Social Security numbers, driver's license numbers, and physical addresses, alongside sensitive occupational health records, drug testing results, medical screening histories, and employment background details. The combination of medical data and foundational identity markers creates severe, long-term risks for affected individuals. Unlike a compromised credit card, which can be canceled and replaced, compromised Social Security numbers and medical screening data cannot be altered. This exposure leaves victims acutely vulnerable to medical identity theft—where unauthorized parties receive care under a victim's name—as well as sophisticated financial fraud, tax return scams, and targeted phishing schemes that exploit the specific context of employment and health testing. As a custodian of employee health and background data, Integrity Testing and Safety Administrators was bound by stringent legal and regulatory duties to protect this information. Under state data protection statutes, the Health Insurance Portability and Accountability Act (HIPAA) where applicable, and fundamental common law negligence principles, entities holding sensitive PII and PHI have an affirmative legal obligation to maintain reasonable security measures, encrypt data at rest and in transit, and promptly patch known software vulnerabilities. The occurrence of a widespread data breach strongly indicates a failure of these legal duties. When an administrator permits unauthorized actors to access and exfiltrate confidential files, it constitutes a prima facie failure to maintain the structural security demanded by modern data privacy standards. Receiving a data breach notification letter from Integrity Testing and Safety Administrators is formal legal confirmation that your most sensitive personal and medical information was compromised due to corporate negligence. Under the law, the receipt of this letter establishes the legal standing necessary to participate in a class action lawsuit seeking accountability, restitution, and mandatory improvements to corporate data security practices. Crucially, victims do not need to prove that they have already suffered actual financial loss or identity theft to pursue legal remedies; the increased, imminent risk of future harm caused by the exposure of your data is legally actionable. Our firm handles these complex class action cases on a strict contingency fee basis, meaning there are never any out-of-pocket costs or hourly fees for affected individuals—we only recover compensation if we successfully secure a recovery on your behalf.

Other notices sent in Nebraska

• Waddell and Associates LLCNebraska Attorney General · Filed date pending
  Count not stated
• Malin and Goetz IncNebraska Attorney General · Filed August 3, 2026
  Count not stated
• ESS MetronNebraska Attorney General · Filed August 3, 2026
  Count not stated
• Lehighton Area School DistrictNebraska Attorney General · Filed August 3, 2026
  Count not stated
• Neon One LLCNebraska Attorney General · Filed July 31, 2026
  Count not stated
• Pathfinder LL and D Insurance GroupNebraska Attorney General · Filed July 31, 2026
  Count not stated