Massachusetts Municipal Wholesale Electric Company (MMWEC)

Massachusetts Municipal Wholesale Electric Company (MMWEC) confirmed a data breach in January 2025, compromising Social Security numbers, taxpayer ID numbers, and financial account info of at least 514 people. Ransomware gang BlackSuit claimed responsibility, stating they stole data from the company's private network. MMWEC discovered suspicious activity on February 2, 2025, and an unauthorized actor accessed systems between January 25 and February 3, 2025. The company is offering 24 months of free credit monitoring to victims. BlackSuit is known for attacking critical industries and has a history of extorting victims.

Source: https://www.comparitech.com/news/massachusetts-electric-utility-notifies-hundreds-of-data-breach-that-leaked-ssns-and-other-info/

TPRM report: https://scoringcyber.rankiteo.com/company/mmwec

"id": "mmw908072925",
"linkid": "mmwec",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 514,
                        'industry': 'Electric Utility',
                        'location': 'Massachusetts',
                        'name': 'Massachusetts Municipal Wholesale Electric '
                                'Company',
                        'type': 'Public Electric Utility Company'}],
 'customer_advisories': 'Offering 24 months of free credit monitoring through '
                        'Experian',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 514,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'Taxpayer ID numbers',
                                              'Financial account information']},
 'date_detected': '2025-02-02',
 'description': 'Massachusetts Municipal Wholesale Electric Company (MMWEC) '
                'experienced a data breach in January 2025, compromising '
                'Social Security numbers, taxpayer ID numbers, and financial '
                'account information of at least 514 people. Ransomware gang '
                'BlackSuit claimed responsibility for the attack.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'Taxpayer ID numbers',
                                 'Financial account information'],
            'identity_theft_risk': True,
            'payment_information_risk': True},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial Gain, Data Theft',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'BlackSuit'},
 'references': [{'source': 'Comparitech'}],
 'response': {'communication_strategy': 'Offering 24 months of free credit '
                                        'monitoring through Experian'},
 'threat_actor': 'BlackSuit',
 'title': 'MMWEC Data Breach',
 'type': 'Ransomware Attack'}