MalwareRansomwareData ExfiltratedData EncryptedPIIIDENTITY_BASICMediumContained
Plug Power Inc.
bd_fdd829aeab061acf · schema v1 · pii pii-v1
Full breach record for Plug Power Inc. →Plug Power Inc. disclosed a ransomware incident occurring March 13-23, 2023, discovered March 22, 2023. Unauthorized access may have exposed personal information of 8,323 individuals. The company engaged forensic experts, notified law enforcement, and offered credit monitoring.
Vermont clock✗ VT AG >45 bday38 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a7a20cf50beef4f5Montana State AGfiled 2023-12-15Candidate
- bd_b0cc7596c5b90898New Hampshire State AGfiled 2023-12-15Verified
- bd_cea3305b3d38602bMaine State AGfiled 2023-12-15Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-15-plug-power-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2023
- Raw hash
- fa711b47d424cc4cb0bdd38ff83066b4fbeca43523ba4386693f6a63c0b2942f
Reporting entity
- Name
- Plug Power Inc.norm: plug power
- Domain
- plugpower.com
Victim entity
- Name
- Plug Power Inc.norm: plug power
- Domain
- plugpower.com
Incident
- Discovered
- Mar 22, 2023
- Materiality determined
- Dec 15, 2023
- Notification sent
- Dec 15, 2023
- Affected individuals
- 8,323
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 38 weeks(268 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.