HackingUtilitiesCustomer Data InvolvedGovernment IDHighContained

DIVERSIFIED GAS & OIL CORPORATION

bd_0b72bd2acd85061d · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 13, 2021

Filed

Mar 4, 2021

To disclose

7 weeks

Affected · nationwide

44,08124 in this filing

Linked

7 filings

Confidence

50%

Full breach record for DIVERSIFIED GAS & OIL CORPORATION →

Diversified Gas & Oil Corporation reported an external system breach that occurred on November 25, 2020, and was discovered on January 13, 2021. The breach compromised the names and Social Security numbers of 24 Maine residents. The company notified the affected individuals on March 4, 2021, and offered 24 months of credit monitoring and identity protection services through IDX.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 13, 2021 → Filed with AG Mar 4, 202150d ⏱ ME AG >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 49 days

discovery → filing · 7 weeks / 50 days

Nov 25, 2020

Begins

Jan 13, 2021

Discovered

Mar 4, 2021

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Montana State AGbd_6152aff53228a8b32021-03-04Verified by operator
California State AGbd_10dab56a2a8fb4c72021-01-27 · +36dVerified
Maine State AGbd_2555950badecff1a2021-01-27 · +36dCandidate
Massachusetts State AGbd_78e980f3ac89b9892021-01-27 · +36dVerified

Show 2 more filings ↓up to 36d gap

Montana State AGbd_bf190fde1c5e1c022021-01-27 · +36dVerified
Indiana State AGbd_e12a2bf250d57bea2021-01-27 · +36dVerified

Name: DIVERSIFIED GAS & OIL CORPORATION
norm: diversified gas oil

Name: DIVERSIFIED GAS & OIL CORPORATION
norm: diversified gas oil

Discovered: Jan 13, 2021
Breach occurred: Nov 25, 2020
Undetected for: 49 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 4, 2021
Affected individuals: 44,081state + nationwide
Data types: Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered 24 months of credit monitoring and identity protection services from IDX.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: ME AG >30d · 50d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 13, 2021
→ Filed with AG: Mar 4, 2021
50d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 13, 2021 → Filed with AG: Mar 4, 2021	50d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

California State AGJan 27 · first

Maine State AGJan 27 · first

Massachusetts State AGJan 27 · first

Montana State AGJan 27 · first

Indiana State AGJan 27 · first

Montana State AG+36d

Maine State AG+36d · this page

Pattern: first filing Jan 27 (CA), last Mar 4 (ME) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/81da8716-e42a-4f98-8d32-f069c7aa0d4f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2021
Raw hash: f8c1127899ee5623a6d15cd0ce5c1f298b13fd3e2072a79af8db91c547150c79

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityDIVERSIFIED GAS & OIL CORPORATION

Victim entityDIVERSIFIED GAS & OIL CORPORATION

Incidentdiscovered Jan 13, 2021

Stated responseOffered 24 months of credit monitoring and identity protection services from IDX.

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov