HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Upper Peninsula Power Company
bd_90c50cb6cd1453b1 · schema v1 · pii pii-v1
Full breach record for Upper Peninsula Power Company →Upper Peninsula Power Company reported an external system breach (hacking) occurring on June 23, 2022, discovered on November 1, 2022. The incident compromised the names and Social Security Numbers of approximately 39,400 individuals, including one Maine resident. The company provided written notification and offered 12 months of credit monitoring and identity protection services through IDX.
Maine clockDiscovered Nov 1, 2022 → Filed with AG Nov 23, 202222d ✓ ME AG ≤30d22 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed39,400 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/af15baab-b66a-40fd-82d4-9db2b9e2c74c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 23, 2022
- Raw hash
- bdc9804f09024b07f886cb401f78e6e02aa17b650252c320028080a91f682849
Reporting entity
- Name
- Upper Peninsula Power Companynorm: upper peninsula power
Victim entity
- Name
- Upper Peninsula Power Companynorm: upper peninsula power
Incident
- Discovered
- Nov 1, 2022
- Materiality determined
- —
- Notification sent
- Nov 23, 2022
- Affected individuals
- 39,400
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 22d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 1, 2022→ Filed with AG: Nov 23, 202222d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.