MalwareRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICLowContained
WESTERN NEW YORK ENERGY, LLC
bd_6366f9e842125314 · schema v1 · pii pii-v1
Full breach record for WESTERN NEW YORK ENERGY, LLC →Western New York Energy (WNYE) reported a ransomware attack discovered on April 25, 2025. The incident resulted in the exfiltration of employee personal information (PII), including names. WNYE engaged forensic investigators, notified the FBI, and contained the breach. Four New Hampshire residents were affected. Notifications were sent on June 4, 2025, offering credit monitoring and identity theft protection.
Leak gap clock⏱ Leak >30d6 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
A leak claim by safepay about this victim predates this filing by 41 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_116d91d1a1870738Vermont State AGfiled 2025-06-04Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/western-new-york-energy-20250604.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 4, 2025
- Raw hash
- d2fa1f9c24f3e53ad02608b957bb69be6346dec5298a6f2c18c1a0c67f271f26
Reporting entity
- Name
- WESTERN NEW YORK ENERGY, LLCnorm: western new york energy
- Domain
- wnyenergy.com
Victim entity
- Name
- WESTERN NEW YORK ENERGY, LLCnorm: western new york energy
- Domain
- wnyenergy.com
Incident
- Discovered
- Apr 25, 2025
- Materiality determined
- May 23, 2025
- Notification sent
- Jun 4, 2025
- Affected individuals
- 4
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBI and is fully cooperating with their investigation
Compliance
- Time to disclose
- 6 weeks(40 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.