HackingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICEMPLOYMENTMediumContained
Kern Oil & Refining Co.
bd_27210e2d0ad77511 · schema v1 · pii pii-v1
Full breach record for Kern Oil & Refining Co. →Kern Oil & Refining Co. d/b/a Kern Energy experienced a security incident in August 2025 where an unauthorized third party gained access to systems containing personal information of current and former employees, dependents, and beneficiaries. Affected data includes names, addresses, phone numbers, dates of birth, Social Security Numbers, and health insurance information. The company contained the threat, engaged forensic experts, notified law enforcement, and is offering 24 months of credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_cac7e6b0439a559dNew Hampshire State AGfiled 2025-11-21(3d gap)Verified
- bd_e312f6f33b2643a7Indiana State AGfiled 2025-11-12(12d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-614681
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 24, 2025
- Raw hash
- 0525b31b93c1364f4973618d8b97475fb7d3fdacf2321e3169fef5086aa2414d
Reporting entity
- Name
- Kern Oil & Refining Co.norm: kern oil refining
Victim entity
- Name
- Kern Oil & Refining Co.norm: kern oil refining
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.