HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Cornerstone Energy Services, Inc.
bd_700cafa16f819d52 · schema v1 · pii pii-v1
Full breach record for Cornerstone Energy Services, Inc. →Cornerstone Energy Services, Inc. reported an external system breach (hacking) on July 25, 2023, affecting 500 individuals, including 200 Maine residents. The incident involved the acquisition of names and driver's license numbers. The company notified affected individuals electronically on July 26, 2023, and provided 24 months of Life Lock identity protection services.
Maine clockDiscovered Jul 25, 2023 → Filed with AG Aug 21, 202327d ✓ ME AG ≤30d27 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed500 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/22e7f50b-ea6d-40f1-9f4d-02188d85fa02.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 21, 2023
- Raw hash
- 2343c1458d75dfbe6ba72f0a8c2e8f5d43f5c8cd838b2bfe2c5c8fa940df4b2d
Reporting entity
- Name
- Cornerstone Energy Services, Inc.norm: cornerstone energy
Victim entity
- Name
- Cornerstone Energy Services, Inc.norm: cornerstone energy
Incident
- Discovered
- Jul 25, 2023
- Materiality determined
- —
- Notification sent
- Jul 26, 2023
- Affected individuals
- 500
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 25, 2023→ Filed with AG: Aug 21, 202327d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.