Social EngineeringPhishingDelayed DiscoveryIDENTITY_BASICLowContained
Permian Resources Corporation
bd_105cf2906e98e00e · schema v1 · pii pii-v1
Full breach record for Permian Resources Corporation →Permian Resources Corporation notified Vermont consumers of a security incident occurring December 8-11, 2023, where phishing emails led to unauthorized access to employee email accounts. The investigation concluded with no confirmation that consumer data was accessed, though it could not rule out the possibility. Affected individuals were offered 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3370347684749bf0Indiana State AGfiled 2024-03-25Verified
- bd_6311d921a43f4be9Idaho State AGfiled 2024-04-03(9d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-25-permian-resources-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2024
- Raw hash
- 9675c32e740bd5946bfaa805534bf37dccf05251822d981c60a85e5fdad4eaec
Reporting entity
- Name
- Permian Resources Corporationnorm: permian resources
Victim entity
- Name
- Permian Resources Corporationnorm: permian resources
Incident
- Discovered
- Dec 8, 2023
- Materiality determined
- —
- Notification sent
- Mar 25, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 weeks(108 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.