Massachusetts Clean Energy Technology Center

The Maine Office of the Attorney General reported on September 14, 2021, that the Massachusetts Clean Energy Technology Center (MassCEC) experienced a ransomware attack on July 28, 2021, potentially affecting the personal information of four (4) Maine residents. The attack involved unauthorized access to systems, resulting in the encryption of certain files and data theft, including names and social security numbers. MassCEC offered 24 months of identity theft protection services through IDX to the affected individuals.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d69bebb9-de64-4038-a08a-714da4a1c697.shtml

TPRM report: https://www.rankiteo.com/company/masscec

"id": "mas031072925",
"linkid": "masscec",
"type": "Ransomware",
"date": "7/2021",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 4,
                        'industry': 'Energy',
                        'location': 'Massachusetts',
                        'name': 'Massachusetts Clean Energy Technology Center '
                                '(MassCEC)',
                        'type': 'Government Agency'}],
 'attack_vector': 'Unauthorized access to systems',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 4,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security Numbers']},
 'date_detected': '2021-07-28',
 'date_publicly_disclosed': '2021-09-14',
 'description': 'The Massachusetts Clean Energy Technology Center (MassCEC) '
                'experienced a ransomware attack on July 28, 2021, potentially '
                'affecting the personal information of four (4) Maine '
                'residents. The attack involved unauthorized access to '
                'systems, resulting in the encryption of certain files and '
                'data theft, including names and social security numbers. '
                'MassCEC offered 24 months of identity theft protection '
                'services through IDX to the affected individuals.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': 'High'},
 'ransomware': {'data_encryption': True, 'data_exfiltration': True},
 'references': [{'date_accessed': '2021-09-14',
                 'source': 'Maine Office of the Attorney General'}],
 'title': 'MassCEC Ransomware Attack',
 'type': 'Ransomware'}