Nebraska · verified official-source register

Nebraska Privacy Enforcement Cases

3 verified case records from the authoritative 50-state register. The fields below preserve the supplied amount, date, legal basis and explanation of why the action was brought.

3 official case source links · state register dated August 31, 2026

Actual case links

Nebraska case register

Each record links directly to the official Attorney General or state-agency source supplied for this register. Shared multistate amounts are reproduced as stated and should not be summed as unique state penalties.

Verified case 1 of 3

Marriott International, Inc.

Date
Wednesday, October 9, 2024
Amount
$52 million payment to states; Nebraska will receive $707,448.00
Legal basis
state consumer protection laws, personal information protection laws, and, where applicable, breach notification laws

Why the action was brought

Marriott settled allegations that it violated state consumer protection laws, personal information protection laws, and, where applicable, breach notification laws. Intruders went undetected from July 2014 through September 2018, compromising 131.5 million U.S. guest records, including contact and reservation information, preferences, and limited unencrypted passport and payment-card data, after Marriott acquired and integrated Starwood.

View Official Case Source ↗ (opens in a new tab)

Verified case 2 of 3

Experian; T-Mobile; Experian Data Corp. (“EDC”)

Date
not stated in the official release
Amount
$12.67 million settlement with Experian; $2.43 million settlement with T-Mobile; additional $1 million payment by Experian Data Corp.; combined amount of more than $16 million; Nebraska will receive $139,279
Legal basis
No specific statutes or laws cited in the document

Why the action was brought

Experian experienced a 2015 breach in which an unauthorized actor accessed personal information—including names, addresses, birth dates, Social Security numbers, and identification numbers—of more than 15 million T-Mobile applicants, including 4,790 Nebraska residents. EDC failed to prevent or provide notice of a 2012 breach after an identity thief obtained sensitive commercial database information.

View Official Case Source ↗ (opens in a new tab)

Verified case 3 of 3

Sabre Corporation

Date
not stated in the official release
Amount
$2.4 million; Nebraska will receive $43,006; injunctive relief
Legal basis
No statutes or laws cited

Why the action was brought

The settlement resolves an investigation into a breach of Sabre Hospitality Solutions’ hotel booking system occurring between August 2016 and March 2017. The breach exposed approximately 1.3 million credit cards. Hotels provided consumer notices, some as late as 2018, and some consumers received multiple notices for the same breach. The document does not identify a specific statutory violation or other failure.

View Official Case Source ↗ (opens in a new tab)

Source data is based on verified concluded privacy, data-breach and data-security enforcement actions located on official state Attorney General or state-agency sources. Multistate settlement amounts are reproduced as stated by the official source and should not be summed as unique state penalties.

Educational information, not legal advice.

Back to NebraskaAll states