HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
AAA Energy Service Co.
bd_c5cdb32c0d5727e3 · schema v1 · pii pii-v1
Full breach record for AAA Energy Service Co. →AAA Energy Service Co. reported an external system breach that occurred on December 6, 2022, and was discovered on February 28, 2023. The incident affected 141 Maine residents, compromising their names and Social Security numbers. Notification letters were sent to affected individuals on May 8, 2023, and identity theft protection services were offered.
Maine clockDiscovered Feb 28, 2023 → Filed with AG May 6, 202367d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by blacksuit about this victim predates this filing by 50 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_c7addb42612062e8Leak Siteblacksuitfiled 2023-03-17(50d gap)Verified by operator
Regulatory filings (1) · sorted by filing gap
- bd_b55606c821a4e3a0New Hampshire State AGfiled 2023-05-08(2d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d6e7f1b5-6ece-4a8a-ad94-76b4b144cd20.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2023
- Raw hash
- fa5c54854ca6209a9a275f5aa67bd90af7c2f991d5e9d622c4868578c6eaad43
Reporting entity
- Name
- AAA Energy Service Co.norm: aaa energy service
- Domain
- aaaenergy.com
Victim entity
- Name
- AAA Energy Service Co.norm: aaa energy service
- Domain
- aaaenergy.com
Incident
- Discovered
- Feb 28, 2023
- Materiality determined
- —
- Notification sent
- May 8, 2023
- Affected individuals
- 141
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- ME AG >30d · 67dME resident >60d · 69dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 28, 2023→ Filed with AG: May 6, 202367d 30 days (soft) ME AG >30d Maine Discovered: Feb 28, 2023→ Notified: May 8, 202369d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.