HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
BHI Energy I Specialty Services LLC
bd_8fa2440398ccf349 · schema v1 · pii pii-v1
Full breach record for BHI Energy I Specialty Services LLC →BHI Energy I Specialty Services LLC reported an external system breach (hacking) occurring between May 30, 2023, and July 7, 2023, discovered on September 1, 2023. The incident compromised the names and Social Security Numbers of 91,269 individuals, including 599 Maine residents. The company provided written notification on October 18, 2023, and offered 24 months of Experian IdentityWorks identity protection services.
Maine clockDiscovered Sep 1, 2023 → Filed with AG Oct 18, 202347d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_0058c059945a2749New Hampshire State AGfiled 2023-10-18Verified
- bd_06d2a8db0a5a2a79Washington State AGfiled 2023-10-18Candidate
- bd_36f52a39ba8b286dCalifornia State AGfiled 2023-10-18Verified
- bd_46cdc3e8aa9e883dMontana State AGfiled 2023-10-18Verified
Show 2 more filings ↓Show fewer ↑
- bd_56c902fa1f6b5407Oregon State AGfiled 2023-10-18Verified
- bd_6b70bd566e3b8be6Vermont State AGfiled 2023-10-18Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0c96d450-be94-40b9-92ad-6c8e1cf64ef8.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2023
- Raw hash
- 68baeedebff908230648ce86a47b811e03cd4ad77f8f6c1a4d0c1c567da4a568
Reporting entity
- Name
- BHI Energy I Specialty Services LLCnorm: bhi energy i specialty
Victim entity
- Name
- BHI Energy I Specialty Services LLCnorm: bhi energy i specialty
Incident
- Discovered
- Sep 1, 2023
- Materiality determined
- —
- Notification sent
- Oct 18, 2023
- Affected individuals
- 91,269
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- ME AG >30d · 47d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 1, 2023→ Filed with AG: Oct 18, 202347d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.