HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Green Mountain Electric Supply, Inc.
bd_4048400d1d0a4fe3 · schema v1 · pii pii-v1
Full breach record for Green Mountain Electric Supply, Inc. →Green Mountain Electric Supply, Inc. reported an external system breach (hacking) occurring between May 5, 2022, and June 1, 2022, discovered on May 24, 2022. The incident affected 150 individuals, including 1 Maine resident. Acquired data included names and driver's license numbers. The company provided written notification and offered 1-year credit monitoring through Kroll.
Maine clockDiscovered May 24, 2022 → Filed with AG Jul 8, 202245d ⏱ ME AG >30d6 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 45 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_368d0fd2690f30efLeak Sitealphvfiled 2022-05-24(45d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c189e660-4313-4521-9ce1-9550f851fcd1.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 8, 2022
- Raw hash
- aef83a60cc908b5e82c73a61844cc605173229d0d99344d8f90694accbc7e98f
Reporting entity
- Name
- Green Mountain Electric Supply, Inc.norm: green mountain electric supply
- Domain
- gmes.com
Victim entity
- Name
- Green Mountain Electric Supply, Inc.norm: green mountain electric supply
- Domain
- gmes.com
Incident
- Discovered
- May 24, 2022
- Materiality determined
- —
- Notification sent
- Jul 8, 2022
- Affected individuals
- 150
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- ME AG >30d · 45dLeak >30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 24, 2022→ Filed with AG: Jul 8, 202245d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.