FEDERALItem 8.01 · voluntaryMalwarePhishingRansomwareData EncryptedTargetedLowContained
Tecogen Inc.
bd_f4d2583c15370554 · schema v1 · pii pii-v1
Full breach record for Tecogen Inc. →Tecogen Inc. disclosed a ransomware attack on April 28, 2023, initiated via a spear phishing attack through its VPN. Malware was found on two workstations; files were restored from backups by May 1, 2023. Tecogen changed passwords, audited accounts, disabled VPN pending MFA implementation, and is investigating improved security solutions.
SEC clockMateriality determined May 3, 2023 → Filed May 3, 20230d ✓ SEC 4-day OK5 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1537435/000153743523000036/
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- May 3, 2023
- Raw hash
- 8b2e2ac4507407a48c3e10de8a508d449bc3cc4fa8fd9191e286ad61f0ddd30f
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Tecogen Inc.norm: tecogen
- SEC CIK
- 0001537435
Victim entity
- Name
- Tecogen Inc.norm: tecogen
- SEC CIK
- 0001537435
Incident
- Discovered
- Apr 28, 2023
- Materiality determined
- May 3, 2023
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 5 days(5 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 0d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: May 3, 2023→ Filed: May 3, 20230d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.