HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTCREDENTIALSMediumContained
Rock Energy Systems, LLC
bd_0d89c8eeb8c403e4 · schema v1 · pii pii-v1
Full breach record for Rock Energy Systems, LLC →Resource Energy Systems, LLC notified the NH AG of a data breach occurring May 16-17, 2025, involving unauthorized access to a cloud-based file storage platform. Approximately 2 NH residents were affected. Compromised data included names, SSNs, health info, bank account numbers, and credentials. The incident was contained, and forensic experts were engaged. Affected individuals received 24 months of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/resource-energy-systems-20250616.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 16, 2025
- Raw hash
- 39e5a3899ebe51690b47b0c6a92845a6400f1b037aacd05d9038c69c9ac07786
Reporting entity
- Name
- Rock Energy Systems, LLCnorm: rock energy
Victim entity
- Name
- Rock Energy Systems, LLCnorm: rock energy
Incident
- Discovered
- May 16, 2025
- Materiality determined
- —
- Notification sent
- Jun 16, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.