On February 4, 2025, Riverside Energy Michigan, LLC experienced a data breach that resulted in unauthorized access to sensitive personal information. The breach was disclosed to the Massachusetts Attorney General’s office on May 5, 2025, and affected at least 6 individuals in the state.
According to the official notice, the information exposed included personally identifiable information (PII) such as social security numbers. There is no indication that protected health information (PHI) was involved.
The method of the breach involved unauthorized access by a third party, though additional specifics about how the intrusion occurred have not been disclosed. The breach is considered serious due to the exposure of social security numbers, which are highly sensitive and can be used for identity theft or fraud.
For more details, you can review the official disclosure filed with the Massachusetts Attorney General’s office, available at the Riverside Energy Michigan, LLC data breach notice.
After discovering the breach, Riverside Energy Michigan took steps to notify affected individuals promptly and provided detailed instructions on how to protect themselves from potential identity theft. The company is offering complimentary access to Experian IdentityWorks for 24 months. This service includes credit monitoring, identity restoration support, and up to $1 million in identity theft insurance. Affected individuals are encouraged to enroll in this program by August 29, 2025, using the information provided in their notification letter.
Additionally, Riverside Energy Michigan, LLC has provided guidance on placing a security freeze or fraud alert on credit reports. These measures can help prevent unauthorized use of your credit information. The company has also included contact information for the three major credit reporting agencies—Equifax, Experian, and TransUnion—so that individuals can take immediate action if they believe their information has been misused.
If you received a notice, it is important to:
If you have questions or need assistance, a dedicated helpline is available at 866-578-5422, Monday through Friday, from 9:00 am to 9:00 pm Eastern Time (excluding U.S. holidays).
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.