HackingEnergy & UtilitiesUtilitiesStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDPIIPHIMediumContained

Colonial Pipeline Company

bd_5c7a808f3b8e3dff · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 6, 2021

Filed

Aug 13, 2021

To disclose

14 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Colonial Pipeline Company →3 incidents on file

Colonial Pipeline Company notified Montana residents of a cybersecurity incident where an unauthorized third party accessed records on May 6, 2021. Affected data included names, DOBs, government IDs, and health insurance info. The company engaged outside security experts, coordinated with law enforcement, and offered two years of free credit monitoring and identity restoration.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 99 days

May 6, 2021

Begins

May 6, 2021

Discovered

Aug 13, 2021

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitedarksidebd_4e75a41a44f3584b2021-05-07 · +98dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_401b120005977c172021-08-13Verified by operator
Maine State AGbd_8a4478baa1fd0c592021-08-13Verified
Massachusetts State AGbd_9d7317b33ba8b0f52021-08-13Verified

Name: Colonial Pipeline Company
norm: colonial pipeline
Domain: colonialpipeline.com

Name: Colonial Pipeline Company
norm: colonial pipeline
Domain: colonialpipeline.com
Industry: Energy & Utilitiesllm

Discovered: May 6, 2021
Breach occurred: May 6, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 13, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPIIPHI
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Coordinated with law enforcement
Initial access: valid_credentials

During the incident: Engaged leading outside security experts to assist with our investigation
Implemented additional information security measures to enhance our safeguards
Coordinated with law enforcement
Changes made: Implemented additional information security measures to enhance our safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(99 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGAug 13 · first

Maine State AGAug 13 · first

Massachusetts State AGAug 13 · first

Montana State AGAug 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/notificationLetter-48.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2021
Raw hash: 04e604b228227cac344bb8a7a967fd71a255db44f17f5d0e922a8e4a21e11979

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityColonial Pipeline Company

Victim entityColonial Pipeline Company

Incidentdiscovered May 6, 2021

Stated responseEngaged leading outside security experts to assist with our investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov