HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)Financial accountLowContained

Energy Federation, Inc.

bd_402e823eac52e23d · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 12, 2011

Filed

Jul 27, 2011

To disclose

15 days

Affected

20state residents only

Confidence

66%

Energy Federation, Inc. notified NH AG of a potential security breach involving malicious files placed on its web server between July 7-10, 2011. The files allowed remote collection of customer data (names, contact info, credit card numbers) for orders placed July 7-12, 2011. 20 NH residents potentially affected. No evidence of actual misuse found. Company removed files, reset passwords, engaged forensic experts, notified law enforcement, and provided 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 15 days

Jul 7, 2011

Begins

Jul 12, 2011

Discovered

Jul 27, 2011

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed20 affectedView incident

Name: Energy Federation, Inc.
norm: energy federation
Domain: franklinenergy.com

Name: Energy Federation, Inc.
norm: energy federation
Domain: franklinenergy.com
Industry: Financial Servicesllm

Discovered: Jul 12, 2011
Breach occurred: Jul 7, 2011 – Jul 10, 2011
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 30, 2011
Affected individuals: 20state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Removed the files
Changed all key system passwords
Launched an internal investigation
Working closely with the four outside firms who monitor our server
Notified law enforcement of the incident
Purchased one year of credit monitoring services from Debix, Inc.
Changes made: Introducing additional security measures to prevent an incident like this from occurring again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/energy-federation-20110727.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 27, 2011
Raw hash: eb114d504034e03fc22b0e6e04ee036e94fa050205d6f07ec573dab8abb773c7

Reporting entityEnergy Federation, Inc.

Victim entityEnergy Federation, Inc.

Incidentdiscovered Jul 12, 2011

Stated responseRemoved the files

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov