HackingEnergy & UtilitiesUtilitiesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

FIVE STATES ENERGY COMPANY, L.L.C.

bd_8611858ddbd14365 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2026

Filed

Apr 2, 2026

To disclose

7 weeks

Affected

10state residents only

Linked

9 filings

Confidence

65%

Full breach record for FIVE STATES ENERGY COMPANY, L.L.C. →

Five States Energy Company, L.L.C. notified the New Hampshire Attorney General on April 2, 2026, of a network compromise detected on February 12, 2026. The incident affected 10 New Hampshire residents, exposing names, SSNs, DOBs, contact info, and bank account numbers. The company engaged forensic experts, notified law enforcement, and provided 24 months of credit monitoring via CyberScout. The incident is contained.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 7 weeks / 49 days

Feb 12, 2026

Discovered

Apr 2, 2026

Filed

This filing is one of 9 about the same incident.View merged incident

A leak claim by dragonforce about this victim predates this filing by 49 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitedragonforcebd_10e7db3f7644f4062026-02-19 · +41dVerified by operator
Leak Sitedragonforcebd_e39e6d2fa52a6db32026-02-12 · +49dVerified by operator

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_f089861523f7f4752026-04-02Verified
Maine State AGbd_fdec22ccffee3a4f2026-04-02Verified
Texas State AGbd_946f8dbde8d6f2b42026-04-06 · +4dVerified
Nebraska State AGbd_ceaac5224b961c9e2026-03-26 · +7dVerified by operator

Show 2 more filings ↓up to 106d gap

Indiana State AGbd_cf6cb656efb1ddef2026-03-26 · +7dCandidate
Massachusetts State AGbd_e8d95536a0c570492026-07-17 · +106dVerified

Name: Pierson Ferdinand LLP
norm: pierson ferdinand
Domain: pierferd.com

Name: FIVE STATES ENERGY COMPANY, L.L.C.
norm: five states energy
Domain: fivestates.com
Industry: Energy & Utilitiesllm

Discovered: Feb 12, 2026
Materiality determined: —
Notification sent: Mar 26, 2026
Affected individuals: 10state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Engaged specialized third parties to commence an independent investigation
Reported this incident to law enforcement
Mailed notification letters to residents
Provided complimentary credit monitoring and identity protection services for twenty-four (24) months through CyberScout
Changes made: Enhanced network security and data privacy
Continuous awareness training and assessment of data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Nebraska State AGMar 26 · first

Indiana State AGMar 26 · first

Vermont State AG+7d

Maine State AG+7d

New Hampshire State AG+7d · this page

Texas State AG+11d

Massachusetts State AG+113d

Pattern: first filing Mar 26 (NE), last Jul 17 (MA) — a 113-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/five-states-energy-company-20260402.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 2, 2026
Raw hash: 23a2d6571bf2f4fa415e47031fa4b0816cb2bd88bb94eb1cc76c0f638c8e9027

Linked disclosures

Ransomware claims (2)

Regulatory filings (6) · sorted by filing gap

Reporting entityPierson Ferdinand LLP

Victim entityFIVE STATES ENERGY COMPANY, L.L.C.

Incidentdiscovered Feb 12, 2026

Stated responseEngaged specialized third parties to commence an independent investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov