HackingEnergy & UtilitiesUtilitiesCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHighResolved

DIVERSIFIED GAS & OIL CORPORATION

bd_2555950badecff1a · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 13, 2021

Filed

Jan 27, 2021

To disclose

14 days

Affected · nationwide

43,52923 in this filing

Linked

7 filings

Confidence

63%

Full breach record for DIVERSIFIED GAS & OIL CORPORATION →

Diversified Gas & Oil Corporation reported an external system breach that occurred on November 25, 2020, and was discovered on January 13, 2021. The breach affected 43,529 individuals, compromising names and Social Security numbers. The company began notifying affected individuals on January 27, 2021, and offered 24 months of credit monitoring and identity protection services through IDX.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 13, 2021 → Filed with AG Jan 27, 202114d ✓ ME AG ≤30d14 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 49 days

discovery → filing · 14 days

Nov 25, 2020

Begins

Jan 13, 2021

Discovered

Jan 27, 2021

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_10dab56a2a8fb4c72021-01-27Verified
Massachusetts State AGbd_78e980f3ac89b9892021-01-27Verified
Montana State AGbd_bf190fde1c5e1c022021-01-27Verified
Indiana State AGbd_e12a2bf250d57bea2021-01-27Verified

Show 2 more filings ↓up to 36d gap

Maine State AGbd_0b72bd2acd85061d2021-03-04 · +36dVerified by operator
Montana State AGbd_6152aff53228a8b32021-03-04 · +36dVerified by operator

Name: DIVERSIFIED GAS & OIL CORPORATION
norm: diversified gas oil

Name: DIVERSIFIED GAS & OIL CORPORATION
norm: diversified gas oil
Industry: Energy & Utilitiesllm

Discovered: Jan 13, 2021
Breach occurred: Nov 25, 2020
Undetected for: 49 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 27, 2021
Affected individuals: 43,529state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Provided 24 months of credit monitoring and identity protection services through IDX
Sent written notification to affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: ME AG ≤30d · 14d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 13, 2021
→ Filed with AG: Jan 27, 2021
14d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 13, 2021 → Filed with AG: Jan 27, 2021	14d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

California State AGJan 27 · first

Massachusetts State AGJan 27 · first

Montana State AGJan 27 · first

Indiana State AGJan 27 · first

Maine State AGJan 27 · first · this page

Maine State AG+36d

Montana State AG+36d

Pattern: first filing Jan 27 (CA), last Mar 4 (MT) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f2e7d6d3-ea10-4d82-a54a-f2a29eee52ef.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2021
Raw hash: 7c2dd41fdff445554a9b7d6eb4da2ef3f7f6bc298de6cd50000e0a6147ff198a

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityDIVERSIFIED GAS & OIL CORPORATION

Victim entityDIVERSIFIED GAS & OIL CORPORATION

Incidentdiscovered Jan 13, 2021

Stated responseProvided 24 months of credit monitoring and identity protection services through IDX

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov