HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Muscatine Power and Water
bd_9cce6c3130912bb1 · schema v1 · pii pii-v1
Full breach record for Muscatine Power and Water →Muscatine Power and Water, an Iowa-based utility, reported an external system breach that occurred between January 26 and January 27, 2024. The incident was discovered on January 31, 2024, and affected 36,955 individuals, including 3 Maine residents. The compromised information included names and Social Security numbers. Affected individuals were notified in writing on March 1, 2024, and offered 12 months of identity theft protection services.
Maine clockDiscovered Jan 31, 2024 → Filed with AG Mar 1, 202430d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1ce260ae33fa4ad0Montana State AGfiled 2024-03-01Candidate
- bd_3ff8d8ed8e32d61dVermont State AGfiled 2024-03-01Verified
- bd_a4c2d9df6bf3fb69New Hampshire State AGfiled 2024-03-01Verified
- bd_d65b83f288366f91Indiana State AGfiled 2024-03-01Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d579c23c-f4f3-484e-b634-c0d3a08d220c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 1, 2024
- Raw hash
- e51cb17430c09c7ca9685da84703da036d019733088da9d91a087447a5004005
Reporting entity
- Name
- Muscatine Power and Waternorm: muscatine power and water
Victim entity
- Name
- Muscatine Power and Waternorm: muscatine power and water
Incident
- Discovered
- Jan 31, 2024
- Materiality determined
- —
- Notification sent
- Mar 1, 2024
- Affected individuals
- 36,955
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 31, 2024→ Filed with AG: Mar 1, 202430d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.