DisclosureLens
HackingBECStolen CredentialsCustomer Data InvolvedPIIGovernment IDMediumContained

Sunny Energy, LLC

bd_480399bbc6a4a387 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2023

Filed

Mar 10, 2023

To disclose

8 weeks

Affected · nationwide

1612 in this filing

Confidence

50%
Full breach record for Sunny Energy, LLC →

Sunny Energy, LLC reported a business email compromise that occurred between November 14, 2022, and November 21, 2022. The breach was discovered on January 11, 2023, and affected 2 Maine residents. The compromised information included names and Social Security numbers. The company offered 12 months of credit monitoring and identity theft protection services through TransUnion.

Maine clockDiscovered Jan 11, 2023 → Filed with AG Mar 10, 202358d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 58 days
discovery → filing · 8 weeks / 58 days

Nov 14, 2022

Begins

Jan 11, 2023

Discovered

Mar 10, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed161 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.