Sunny Energy, LLC

The Maine Office of the Attorney General reported that Sunny Energy, LLC experienced a data breach resulting from business email compromise, affecting 161 individuals, including 2 residents of Maine. The breach occurred between November 14 and November 21, 2022, and involved unauthorized access to an employee email account, potentially exposing social security numbers. Sunny Energy offered 12 months of credit monitoring and identity theft protection services through TransUnion as part of their response.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/991cac36-6d64-4e03-b86a-fafdf038ec6b.shtml

TPRM report: https://www.rankiteo.com/company/sunny-energy

"id": "sun549080425",
"linkid": "sunny-energy",
"type": "Breach",
"date": "11/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 161,
                        'industry': 'Energy',
                        'name': 'Sunny Energy, LLC',
                        'type': 'Company'}],
 'attack_vector': 'Business Email Compromise',
 'data_breach': {'number_of_records_exposed': 161,
                 'personally_identifiable_information': ['Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_detected': '2022-11-14',
 'description': 'Sunny Energy, LLC experienced a data breach resulting from '
                'business email compromise, affecting 161 individuals, '
                'including 2 residents of Maine. The breach occurred between '
                'November 14 and November 21, 2022, and involved unauthorized '
                'access to an employee email account, potentially exposing '
                'social security numbers.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Employee email account'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'response': {'remediation_measures': ['12 months of credit monitoring and '
                                       'identity theft protection services'],
              'third_party_assistance': ['TransUnion']},
 'title': 'Sunny Energy Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized access to an employee email account'}