PhysicalEnergy & UtilitiesUtilitiesTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PIIMediumResolved

Exterran Corporation

bd_158edc433c4fb515 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 26, 2016

To disclose

—

Affected

9state residents only

Linked

3 filings

Confidence

66%

Full breach record for Exterran Corporation →

Exterran notified Montana residents that a laptop containing employee PII (SSN, DOB, health info) was stolen from an employee's car in Houston, TX on Nov 24, 2015. The laptop was password-protected and remotely wipeable. Exterran offered one year of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 24, 2015

Begins

Aug 26, 2016

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_8d84ef36095d1a962016-08-25 · +1dVerified
Massachusetts State AGbd_92cc29f79a7a2fd42016-09-01 · +6dVerified

Name: Exterran Corporation
norm: exterran
Domain: exteran.com

Name: Exterran Corporation
norm: exterran
Domain: exteran.com
Industry: Energy & Utilitiesllm

Discovered: —
Breach occurred: Nov 24, 2015
Materiality determined: —
Notification sent: Mar 16, 2016
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PII
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Secured the services of Kroll to provide identity monitoring at no cost for one year
Reported the theft to local law enforcement
Analyzed backup copies of emails with the assistance of outside experts
Changes made: Provided one year of complimentary identity monitoring through Kroll
Established a customer call center to handle questions related to the incident
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGAug 25 · first

Montana State AG+1d · this page

Massachusetts State AG+7d

Pattern: first filing Aug 25 (NH), last Sep 1 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Exterran.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 26, 2016
Raw hash: c376b27b1f54cff7914682295dcc5177f3782d7bafe319ba5063d6b260120d0e

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityExterran Corporation

Victim entityExterran Corporation

IncidentUnauthorized Access

Stated responseSecured the services of Kroll to provide identity monitoring at no cost for one year

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov