HackingEnergy & UtilitiesUtilitiesCustomer Data InvolvedPIIIdentity (basic)LowContained

Aiken Electric Cooperative, Inc.

bd_8313cc6bde964b4b · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 1, 2024

Filed

Sep 27, 2024

To disclose

26 days

Affected

1state residents only

Linked

4 records

Confidence

66%

Full breach record for Aiken Electric Cooperative, Inc. →

Aiken Electric Co-op, Inc. reported a cybersecurity incident discovered on September 1, 2024, where an unauthorized actor potentially accessed and acquired files from its network. One New Hampshire resident was affected. The company isolated its network, engaged forensic investigators, reset passwords, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 26 days

Sep 1, 2024

Discovered

Sep 18, 2024

Scope determined

Sep 27, 2024

Filed

This filing is one of 4 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_bff08376cb8b29832024-10-19 · +22dVerified by operator

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_6ce17ef879c7b3b32024-09-27Verified by operator
South Carolina State AGbd_e49ea9f8c5e599d62024-09-30 · +3dVerified

Name: Aiken Electric Cooperative, Inc.
norm: aiken electric cooperative
Domain: aikenco-op.org

Name: Aiken Electric Cooperative, Inc.
norm: aiken electric cooperative
Domain: aikenco-op.org
Industry: Energy & Utilitiesllm

Discovered: Sep 1, 2024
Materiality determined: Sep 18, 2024
Notification sent: Sep 27, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Isolated its network environment
Engaged a specialized third-party cybersecurity firm to assist with securing the environment and conducting a comprehensive investigation
Engaged a specialized cybersecurity firm to conduct a forensic investigation
Informed its law firm
Began identifying the potentially affected individuals in preparation for notice
Offered complimentary credit monitoring and identity theft restoration services
Reset passwords for all accounts
Updated policies and procedures, including the security risk management plan
Improved physical security
Implemented new technical safeguards
Enhanced data security measures
Trained workforce members
Implemented periodic technical and nontechnical evaluations
Deployed additional monitoring tools
Changes made: Updated policies and procedures, including the security risk management plan
Improved physical security
Implemented new technical safeguards
Enhanced data security measures
Trained workforce members
Implemented periodic technical and nontechnical evaluations
Deployed additional monitoring tools
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGSep 27 · first

New Hampshire State AGSep 27 · first · this page

South Carolina State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/aiken-electric-co-op-20240927.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 27, 2024
Raw hash: 77c3e41114de38dc3633e64d571c17c85c7780b3fc23ba41289f02a0a3bbb3a5

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityAiken Electric Cooperative, Inc.

Victim entityAiken Electric Cooperative, Inc.

Incidentdiscovered Sep 1, 2024

Stated responseIsolated its network environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov