HackingStolen CredentialsDelayed DiscoveryPIILowContained
MUREX PETROLEUM CORPORATION
bd_194759e4e9d2beb1 · schema v1 · pii pii-v1
Full breach record for MUREX PETROLEUM CORPORATION →Murex Petroleum Corporation notified consumers of a cybersecurity incident detected on May 27, 2025, involving unauthorized network access. The company engaged external cybersecurity professionals and Kroll for credit monitoring. Personal information was potentially accessed. Notification was sent on January 27, 2026.
Vermont clock✗ VT AG >45 bday35 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 245 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_765558bad22f7e8cLeak Siteakirafiled 2025-06-30(211d gap)Verified
- bd_605df93111f84976Leak Siteakirafiled 2025-05-27(245d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_440672c7f491e995Indiana State AGfiled 2026-01-27Verified
- bd_c1efa654a1ceba3dMaine State AGfiled 2026-01-27Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-01-27-murex-petroleum-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 27, 2026
- Raw hash
- bdf1168bf2c92fcc5a40b7757879328f345391555d7de2c27bda0fd832f8488f
Reporting entity
- Name
- MUREX PETROLEUM CORPORATIONnorm: murex petroleum
- Domain
- murexpetroleum.com
Victim entity
- Name
- MUREX PETROLEUM CORPORATIONnorm: murex petroleum
- Domain
- murexpetroleum.com
Incident
- Discovered
- May 27, 2025
- Materiality determined
- Jan 7, 2026
- Notification sent
- Jan 27, 2026
- Affected individuals
- Not disclosed
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 35 weeks(245 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.