HackingEnergy & UtilitiesUtilitiesStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Clayco Electric

bd_9362f87a0ec5dbbd · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 24, 2025

Filed

Apr 15, 2026

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for Clayco Electric →

Clayco Electric Co., Inc. notified Nebraska residents of unauthorized network activity identified on October 24, 2025. The incident potentially involved copying of names and other personal data. The company engaged third-party specialists, secured its network, and implemented additional technical safeguards. Affected individuals were offered complimentary credit monitoring services starting April 15, 2026.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

Oct 24, 2025

Discovered

Apr 15, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

A leak claim by qilin about this victim predates this filing by 175 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_93e627ac823b40772025-10-22 · +175dVerified by operator

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_f20b854e20b0b0352026-04-15Verified by operator

Name: Clayco Electric
norm: clayco electric
Domain: claycoelectric.com

Name: Clayco Electric
norm: clayco electric
Domain: claycoelectric.com
Industry: Energy & Utilitiesllm

Discovered: Oct 24, 2025
Materiality determined: —
Notification sent: Apr 15, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took immediate steps to isolate and secure our network
Engaged third-party specialists to assist with containing and investigating the activity
Reviewing our policies and procedures
Implemented additional technical safeguards
Offering you months of complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession and prevent similar incidents from happening in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGApr 15 · first

Nebraska State AGApr 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/e2af1192-008e-404b-9265-ff6290425ef3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2026
Raw hash: ae2769febca3fcc12fd0fe052b74a6c9b27706faf2754eb7152cf352c95d0824

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityClayco Electric

Victim entityClayco Electric

Incidentdiscovered Oct 24, 2025

Stated responseTook immediate steps to isolate and secure our network

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov