PhysicalEnergy & UtilitiesUtilitiesTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

DELEK US HOLDINGS, INC.

bd_1b5f5c0002fa718d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 26, 2017

Filed

Jul 26, 2017

To disclose

4 weeks

Affected

7state residents only

Linked

3 filings

Confidence

66%

Full breach record for DELEK US HOLDINGS, INC. →2 incidents on file

Delek US Holdings, Inc. reported the theft of an employee's laptop from their vehicle on May 23, 2017. The laptop may have contained personal information including names, addresses, SSNs, and compensation data. Delek notified 7 New Hampshire residents and offered one year of identity monitoring services through Kroll. Law enforcement was notified.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 34 days

discovery → filing · 4 weeks / 30 days

May 23, 2017

Begins

Jun 26, 2017

Discovered

Jul 26, 2017

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_46f79024487ebea72017-07-26Verified
Montana State AGbd_f24b799213a99dcc2017-07-26Candidate

Name: Norton Rose Fulbright US LLP
norm: norton rose fulbright us

Name: DELEK US HOLDINGS, INC.
norm: delek us
Industry: Energy & Utilitiesllm

Discovered: Jun 26, 2017
Breach occurred: May 23, 2017
Undetected for: 34 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 26, 2017
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Reported theft to law enforcement
Initial access: insider_action

During the incident: Reported theft to law enforcement on the day of the incident
Conducted an investigation into the files that could have been stored on the computer
Engaged Kroll to provide identity monitoring services at no cost to you for one year
Notifying affected individuals via written letter
Reviewing and updating its information security policies and practices to add additional safeguards for personal information
Changes made: Reviewing and updating its information security policies and practices to add additional safeguards for personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 26 · first

Montana State AGJul 26 · first

New Hampshire State AGJul 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/delek-20170726.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 26, 2017
Raw hash: 889672f536360afe7d7ad0bfd89b805594c91585bd6c1ad72b9af05de6fb64d2

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNorton Rose Fulbright US LLP

Victim entityDELEK US HOLDINGS, INC.

Incidentdiscovered Jun 26, 2017

Stated responseReported theft to law enforcement on the day of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov