HackingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
FIVE STATES ENERGY COMPANY, L.L.C.
bd_e8d95536a0c57049 · schema v1 · pii pii-v1
Full breach record for FIVE STATES ENERGY COMPANY, L.L.C. →Five States Energy Company, L.L.C. notified Massachusetts residents of a network compromise detected on February 12, 2026. The incident involved unauthorized access to investment files containing personal information. The company engaged third-party experts, secured the network, and notified law enforcement. No evidence of fraud was found. Affected individuals were offered 24 months of credit monitoring.
Massachusetts clock✗ MA AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by dragonforce about this victim predates this filing by 139 days.View originating leak claim
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1160-five-states-energy-company-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2026
- Raw hash
- 0fc5025c732143e72435c7490073df1931c86866b13b8a7135e238b6c4884bfa
Reporting entity
- Name
- FIVE STATES ENERGY COMPANY, L.L.C.norm: five states energy
- Domain
- fivestates.com
Victim entity
- Name
- FIVE STATES ENERGY COMPANY, L.L.C.norm: five states energy
- Domain
- fivestates.com
Incident
- Discovered
- Feb 12, 2026
- Materiality determined
- —
- Notification sent
- Mar 26, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- notified and communicated with law enforcement regarding this incident
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 weeks(139 days from discovery to filing)
- Compliance flags
- MA AG >90dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.