MalwareManufacturingManufacturingRansomwareCapture Stored DataData ExfiltratedData EncryptedRansom DemandedTargetedCustomer Data InvolvedDelayed DiscoveryPIILowContained
New River Electrical Corp.
bd_ea699e36923736e3 · schema v1 · pii pii-v1
Full breach record for New River Electrical Corp. →New River Electrical Corp. reported a cyberattack in which an unknown external actor gained unauthorized access to company systems between April 30, 2024, and May 6, 2024. System encryption (indicative of ransomware) was identified on May 6, 2024. Data on affected systems was potentially viewed and downloaded. The breach affected 9,845 individuals total, including 10 Maine residents. Notification was sent November 27, 2024. Credit monitoring via Equifax was offered to affected individuals.
Leak gap clock✗ Leak >180d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by eldorado about this victim predates this filing by 210 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_a5a6d00c400f510cLeak Siteblacklockfiled 2024-09-19(74d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_731343f80ce69f14Montana State AGfiled 2024-12-03Verified
- bd_7b611efde49729d9Vermont State AGfiled 2024-12-03Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8029921a-a575-4023-b472-c10be767b579.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 3, 2024
- Raw hash
- b0388b97a12c5da75bfcee55789cf2069bbf91f4da1fe17aee02d96c08a3d2f2
Reporting entity
- Name
- New River Electrical Corp.norm: new river electrical
- Domain
- nrec.net
- Industry
- Electrical Contractor
Victim entity
- Name
- New River Electrical Corp.norm: new river electrical
- Domain
- nrec.net
- Industry
- Electrical Contractor
- Industry
- Manufacturingllm
Incident
- Discovered
- Sep 4, 2024
- Materiality determined
- —
- Notification sent
- Nov 27, 2024
- Affected individuals
- 10
- Data types
- PII
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported to Maine Attorney GeneralReported to federal law enforcement
Compliance
- Time to disclose
- 13 weeks(90 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 90dME resident >60d · 84d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 4, 2024→ Filed with AG: Dec 3, 202490d 30 days (soft) ME AG >30d Maine Discovered: Sep 4, 2024→ Notified: Nov 27, 202484d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.