Kern Oil & Refining Co.
bd_27210e2d0ad77511 · schema v1 · pii pii-v1
Full breach record for Kern Oil & Refining Co. →Kern Oil & Refining Co. d/b/a Kern Energy experienced a security incident in August 2025 where an unauthorized third party gained access to systems containing personal information of current and former employees, dependents, and beneficiaries. Affected data includes names, addresses, phone numbers, dates of birth, Social Security Numbers, and health insurance information. The company contained the threat, engaged forensic experts, notified law enforcement, and is offering 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 5, 2025
Begins
Nov 24, 2025
Filed
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- New Hampshire State AGbd_cac7e6b0439a559d2025-11-21 · +3dVerified
- Indiana State AGbd_e312f6f33b2643a72025-11-12 · +12dVerified
- Nebraska State AGbd_ec242e430750fd622025-11-12 · +12dVerified
Filing propagation · 4 filings · 4 states
View merged incident ↗Pattern: first filing Nov 12 (IN), last Nov 24 (CA) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.