HackingEnergy & UtilitiesUtilitiesCustomer Data InvolvedPIIFinancial accountMediumContained

Aiken Electric Cooperative, Inc.

bd_e49ea9f8c5e599d6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 1, 2024

Filed

Sep 30, 2024

To disclose

29 days

Affected

4,604state residents only

Linked

4 filings

Confidence

65%

Full breach record for Aiken Electric Cooperative, Inc. →

Aiken Electric Cooperative, Inc. notified South Carolina residents of a data security incident detected on September 1, 2024. An unauthorized actor potentially accessed and acquired files containing names and financial information. The cooperative isolated its network, engaged forensic investigators, and is offering 24 months of credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due29 days discovery → filing

Incident timeline

discovery → filing · 29 days

Sep 1, 2024

Discovered

Sep 30, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_bff08376cb8b29832024-10-19 · +19dVerified by operator

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_6ce17ef879c7b3b32024-09-27 · +3dVerified by operator
New Hampshire State AGbd_8313cc6bde964b4b2024-09-27 · +3dVerified

Name: Aiken Electric Cooperative, Inc.
norm: aiken electric cooperative
Domain: aikenco-op.org

Name: Aiken Electric Cooperative, Inc.
norm: aiken electric cooperative
Domain: aikenco-op.org
Industry: Energy & Utilitiesllm

Discovered: Sep 1, 2024
Materiality determined: —
Notification sent: Sep 27, 2024
Affected individuals: 4,604state-resident count only
Data types: PIIFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial

During the incident: Isolated its network environment
Engaged a specialized third-party cybersecurity firm to assist with securing the environment and conducting a comprehensive investigation
Retaining a leading forensic investigation firm who assisted in conducting an investigation and confirming the security of our network environment
Deployed additional monitoring tools
Enhance the security of our systems
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Deployed additional monitoring tools
Enhance the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGSep 27 · first

New Hampshire State AGSep 27 · first

South Carolina State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/AikenElectricCo-opInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2024
Raw hash: 39d84f76251022588feea5709be91bcb738245ac7aedc4434a29d2ca0602c1ed

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityAiken Electric Cooperative, Inc.

Victim entityAiken Electric Cooperative, Inc.

Incidentdiscovered Sep 1, 2024

Stated responseIsolated its network environment

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov