2026 Five States Energy Co. — network compromise; investment files (SSNs, bank accounts; ~14 individuals cited)
Data compromised
Names, DOB, contact info, SSNs, bank account numbers in investment files
Technical writeup
Five States Energy Co., a Dallas-based private equity firm focused on energy investments, detected and stopped unauthorized activity in its network on February 12, 2026. A forensic investigation concluded that certain investment files containing personal and financial information were subject to unauthorized access. Categories referenced in state regulatory summaries included full names, dates of birth, contact information, Social Security numbers, and bank account numbers. Consumer notifications began around March 26, 2026; New Hampshire and Rhode Island attorney general filings in early April 2026 cited on the order of ten New Hampshire residents and a handful of Rhode Island residents among those notified—treat totals as regulatory snapshots rather than a definitive global count.
Root cause
Unauthorized network access; investigation did not publicly confirm ransomware branding