HackingEnergy & UtilitiesUtilitiesCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Blue Ridge Rural Water Company, Inc.
bd_d504630cee0422fc · schema v1 · pii pii-v1
Full breach record for Blue Ridge Rural Water Company, Inc. →On July 23, 2024, Blue Ridge Rural Water Company, Inc. detected unusual activity on its corporate network (separate from water management/delivery systems). An unauthorized external actor viewed and obtained files stored on certain servers. Review determined that one Maine resident's name and Social Security number were contained in the accessed files. Notification letters were mailed August 6, 2024. One year of CyEx Identity Defense Total credit monitoring was offered.
Maine clockDiscovered Jul 23, 2024 → Filed with AG Aug 6, 202414d ✓ ME AG ≤30d14 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_427b5b019930f992Indiana State AGfiled 2024-08-06Verified
- bd_4b0ab0d24fbded7fVermont State AGfiled 2024-08-06Verified
- bd_e96ff615c4ba5918New Hampshire State AGfiled 2024-08-06Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/74022fb3-c6ac-4d54-8b5d-6d33347224ba.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 6, 2024
- Raw hash
- 5a89a4603c636c18d0877af91a00ef6a5c765f7c11db39441c3d68407293b7fa
Reporting entity
- Name
- Blue Ridge Rural Water Company, Inc.norm: blue ridge rural water
- Domain
- brrwc.org
Victim entity
- Name
- Blue Ridge Rural Water Company, Inc.norm: blue ridge rural water
- Domain
- brrwc.org
- Industry
- Water Supply and Irrigation Systems
- Industry
- Energy & Utilitiesllm
Incident
- Discovered
- Jul 23, 2024
- Materiality determined
- —
- Notification sent
- Aug 6, 2024
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Maine Attorney General notified
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 14d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 23, 2024→ Filed with AG: Aug 6, 202414d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.