MalwareRansomwareRoyalRansom DemandedData ExfiltratedData PublishedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_GOVERNMENTMediumContained
AAA Energy Service Co.
bd_b55606c821a4e3a0 · schema v1 · pii pii-v1
Full breach record for AAA Energy Service Co. →AAA Energy Service Co. reported a ransomware incident involving the 'Royal' malware. Unauthorized access occurred on February 28, 2023, leading to system lockdown. PII including SSNs of 41 New Hampshire residents (employees and payees) was exfiltrated and published on a threat actor site. Ransom was demanded but not paid. Notifications were sent to affected individuals and regulators (FBI, NH AG, ME AG).
Leak gap clock⏱ Leak >30d10 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by blacksuit about this victim predates this filing by 52 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_c7addb42612062e8Leak Siteblacksuitfiled 2023-03-17(52d gap)Verified by operator
Regulatory filings (1) · sorted by filing gap
- bd_c5cdb32c0d5727e3Maine State AGfiled 2023-05-06(2d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/aaa-energy-service-20230508.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 8, 2023
- Raw hash
- 7f690c4d7425df1e11a778a0951f0886c8fb664a343d205bbe1ade6b55a59d55
Reporting entity
- Name
- AAA Energy Service Co.norm: aaa energy service
- Domain
- aaaenergy.com
Victim entity
- Name
- AAA Energy Service Co.norm: aaa energy service
- Domain
- aaaenergy.com
Incident
- Discovered
- Feb 28, 2023
- Materiality determined
- —
- Notification sent
- May 8, 2023
- Affected individuals
- 41
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- notification to the FBInotification to the Attorney General of the State of Mainenotification to state attorneys general in New Hampshire
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.