DisclosureLens
HackingEnergy & UtilitiesProfessional ServicesUtilitiesVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedTargetedIdentity (basic)Government IDFinancial accountMediumActive

CLEAResult

bd_440b9a6a6698327c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 4, 2023

Filed

Aug 23, 2023

To disclose

19 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%
Full breach record for CLEAResult →

CLEAResult, an energy efficiency program administrator, disclosed a data breach involving the MOVEit Transfer software provided by Progress Software. An unauthorized actor accessed and exfiltrated files containing personal information (names, addresses, SSNs, financial data) on or about May 30, 2023. CLEAResult notified affected individuals on August 23, 2023, offering 24 months of credit monitoring. The investigation into the full scope of affected individuals is ongoing.

Leak gap clock⏱ Leak >30d19 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 66 days
discovery → filing · 19 days

May 30, 2023

Begins

Aug 4, 2023

Discovered

Aug 23, 2023

Filed

This filing is one of 2 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 42 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.