HackingVulnerability ExploitCapture Stored DataLace TempestCl0pZero-DayData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedSupply Chain (3P Vendor)Ransom DemandedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
GENESIS ENERGY, L.P.
bd_4299f0bb6199b6e0 · schema v1 · pii pii-v1
Full breach record for GENESIS ENERGY, L.P. →Genesis Energy, L.P. notified the New Hampshire Attorney General of a security incident affecting 4 NH residents. On June 1, 2023, Genesis detected a cyberattack exploiting a previously unknown vulnerability (zero-day) in MOVEit software by Progress Software. The attacker, identified as Lace Tempest (cl0p ransomware group), exfiltrated employee and dependent PII. Genesis patched the vulnerability, engaged law enforcement, and offered identity theft protection services.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/genesis-energy-20230630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2023
- Raw hash
- 4d2c3b69d2ee956f6431d4a083c39cad9ed8b463ebb072e27d81fc8af05c73dc
Reporting entity
- Name
- GENESIS ENERGY, L.P.norm: genesis energy
Victim entity
- Name
- GENESIS ENERGY, L.P.norm: genesis energy
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 4
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access· Lace Tempest
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1119 Automated Collection
- Threat actor
- Lace TempestExternalFinancial
- Regulator citations
- contacted law enforcement regarding this incident and will cooperate in their investigations
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.