DisclosureLens
HackingEnergy & UtilitiesUtilitiesCustomer Data InvolvedFinancial accountFinancial credentialsLowResolved

Eastern Propane & Oil

bd_781ea9f2fb1831a7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 5, 2021

Filed

Sep 15, 2021

To disclose

6 weeks

Affected · nationwide

983102 in this filing

Linked

3 filings

Confidence

50%
Full breach record for Eastern Propane & Oil →

Eastern Propane and Oil experienced an external system breach that occurred from March 22, 2021, to March 29, 2021. The breach was discovered on August 5, 2021. The compromised information involves financial account numbers or credit/debit card numbers in combination with security codes, access codes, passwords, or PINs. A total of 102 Maine residents were affected. Notification to affected consumers was made on September 15, 2021, and the company offered 24 months of complimentary credit monitoring, fraud consultation, and identity theft restoration services through Kroll.

Maine clockDiscovered Aug 5, 2021 → Filed with AG Sep 15, 202141d ⏱ ME AG >30d6 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 136 days
discovery → filing · 6 weeks / 41 days

Mar 22, 2021

Begins

Aug 5, 2021

Discovered

Sep 15, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Massachusetts State AGSep 15 · first
Maine State AGSep 15 · first · this page
New Hampshire State AG+5d

Pattern: first filing Sep 15 (MA), last Sep 20 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.