HackingEnergy & UtilitiesUtilitiesData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)PHIMediumContained

Beusa Energy, LLC

bd_96c96b20bb05e718 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 30, 2025

Filed

Jun 15, 2026

To disclose

46 weeks

Affected

3state residents only

Linked

6 filings

Confidence

66%

Full breach record for Beusa Energy, LLC →

Beusa Energy, LLC notified the New Hampshire Attorney General of a cybersecurity incident affecting 3 NH residents. Unauthorized access occurred between July 24-30, 2025, resulting in the exfiltration of names, addresses, SSNs, and health insurance information. Beusa engaged external cybersecurity professionals, confirmed the scope on May 20, 2026, and began notifying residents on June 10, 2026, offering credit monitoring and fraud alert guidance.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 46 weeks / 320 days

Jul 24, 2025

Begins

Jul 30, 2025

Discovered

Jun 15, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_2488c2724a1471662026-06-10 · +5dCandidate
Texas State AGbd_520a34d8c7b9973e2026-06-10 · +5dVerified
Indiana State AGbd_7ba37609e6109d402026-06-10 · +5dVerified
Nebraska State AGbd_8adc9caee3b1bd632026-06-10 · +5dVerified

Show 1 more filing ↓up to 5d gap

Massachusetts State AGbd_bff1b4d3fb27cbe42026-06-10 · +5dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Beusa Energy, LLC
norm: beusa energy
Industry: Energy & Utilitiesllm

Discovered: Jul 30, 2025
Breach occurred: Jul 24, 2025 – Jul 30, 2025
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 10, 2026
Affected individuals: 3state-resident count only
Data types: Government IDIdentity (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notification to New Hampshire Office of the Attorney General

During the incident: Worked very closely with external cybersecurity professionals experienced in handling these types of incidents
Providing the potentially affected residents with written notification of this incident
Advising the potentially affected residents about the process for placing fraud alerts and/or security freezes on their credit files
Providing with contact information for the consumer reporting agencies and the Federal Trade Commission
Providing with access to complimentary credit monitoring services
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 46 weeks(320 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGJun 10 · first

Texas State AGJun 10 · first

Indiana State AGJun 10 · first

Nebraska State AGJun 10 · first

Massachusetts State AGJun 10 · first

New Hampshire State AG+5d · this page

Pattern: first filing Jun 10 (ME), last Jun 15 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/beusa-energy-20260615.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 15, 2026
Raw hash: a70736e95b98f3be82047ff31c5083be70639ad9cef5046105710a656e150c95

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityBeusa Energy, LLC

Incidentdiscovered Jul 30, 2025

Stated responseWorked very closely with external cybersecurity professionals experienced in handling these types of incidents

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov