HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

ENSTAR (US) INC.

bd_97f27651f23acbe0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 3, 2024

To disclose

—

Affected

105state residents only

Linked

7 filings

Confidence

66%

Full breach record for ENSTAR (US) INC. →3 incidents on file

Enstar US Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a data event affecting individuals in multiple states. The incident, occurring in June 2023, involved unauthorized access to personal information including names, addresses, and Social Security numbers. Enstar notified the FBI, offered 24 months of credit monitoring via Experian, and implemented additional security safeguards.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 1, 2023

Begins

May 3, 2024

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGCL0Pbd_4ae56d13c234962c2024-05-03Verified by operator
Oregon State AGbd_4fe38683307ff8712024-05-03Candidate
California State AGbd_94388364373ec52a2024-05-03Verified by operator
Maine State AGbd_d34099feedd0c4722024-05-03Verified

Show 2 more filings ↓up to 14d gap

California State AGCL0Pbd_1e553d29839a97922024-05-09 · +6dVerified by operator
New Hampshire State AGbd_99d688a6c19da6dd2024-05-17 · +14dVerified

Name: ENSTAR (US) INC.
norm: enstar us

Name: ENSTAR (US) INC.
norm: enstar us
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jun 1, 2023 – Jun 30, 2023
Materiality determined: —
Notification sent: Nov 20, 2023
Affected individuals: 105state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI regarding the eventProvided written notice of this incident to relevant state regulators
Initial access: valid_credentials

During the incident: Notified the FBI regarding the event
Provided access to credit monitoring services for 24 months through Experian
Provided written notice of this incident to relevant state regulators
Provided written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Working to implement additional safeguards
Reviewing policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Vermont State AGMay 3 · first

Oregon State AGMay 3 · first

California State AGMay 3 · first

Maine State AGMay 3 · first

New Hampshire State AGMay 3 · first · this page

California State AG+6d

New Hampshire State AG+14d

Pattern: first filing May 3 (VT), last May 17 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/enstar-us-20240503.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 3, 2024
Raw hash: 6df25ef84633eb6dcae9c67f9acc8c11e6f2c9ae60711a895b43a90b84690975

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityENSTAR (US) INC.

Victim entityENSTAR (US) INC.

IncidentUnauthorized Access

Stated responseNotified the FBI regarding the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov