HackingEnergy & UtilitiesUtilitiesStolen CredentialsCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Axip Energy Services

bd_dcb6438c1c928008 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2024

Filed

Aug 1, 2024

To disclose

22 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Axip Energy Services →

Axip Energy Services, LP notified Montana authorities of a data breach affecting one resident. Unauthorized access occurred March 1–May 6, 2024. Data included names, SSNs, DOBs, bank details, and health insurance info. Response included forensic investigation, law enforcement notification, system rebuilding, and 12-month credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 weeks / 153 days

Mar 1, 2024

Begins

Mar 1, 2024

Discovered

Aug 1, 2024

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitehunters_internationalbd_d1ea52966cbc1a452024-06-07 · +55dVerified by operator
Leak Siteplaybd_f36b3f60892ec7dd2024-04-18 · +105dVerified by operator

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_762666754f024a202024-08-21 · +20dVerified by operator
Indiana State AGbd_b1f76d6b495f60e02024-08-21 · +20dVerified

Name: Axip Energy Services
norm: axip energy services
Domain: axip.com

Name: Axip Energy Services
norm: axip energy services
Domain: axip.com
Industry: Energy & Utilitiesllm

Discovered: Mar 1, 2024
Breach occurred: Mar 1, 2024 – May 6, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 21, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement authorities
Initial access: valid_credentials

During the incident: Worked closely with forensic consultants to investigate, contain and eradicate the incident
Notified federal law enforcement authorities of the incident
Wiped and rebuilt affected systems
Began implementing additional security measures
Arranged for you to enroll in a complimentary credit monitoring service for 12 months, at no cost to you, through CyEx
Set up a dedicated support line
Changes made: Began implementing additional security measures to help further enhance the privacy and security of information stored on our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(153 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGAug 1 · first · this page

Massachusetts State AG+20d

Indiana State AG+20d

Pattern: first filing Aug 1 (MT), last Aug 21 (IN) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1610.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2024
Raw hash: 07b44b017fe425baa66c6140d3123eaca9e2d2ba0f55ea965a1e1c914fbb3cdf

Linked disclosures

Ransomware claims (2)

Regulatory filings (2) · sorted by filing gap

Reporting entityAxip Energy Services

Victim entityAxip Energy Services

Incidentdiscovered Mar 1, 2024

Stated responseWorked closely with forensic consultants to investigate, contain and eradicate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov