HackingEnergy & UtilitiesUtilitiesDelayed DiscoveryPIIIdentity (basic)LowActive

GAS SOUTH, LLC

bd_6097d523013d9b57 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 21, 2022

Filed

Jul 15, 2022

To disclose

21 weeks

Affected

1state residents only

Linked

4 filings

Confidence

65%

Full breach record for GAS SOUTH, LLC →

Gas South LLC notified Montana residents of a data incident where an unknown actor accessed limited systems between Feb 13-23, 2022. Discovered Feb 21, 2022. PII (names) involved. Gas South disconnected systems, notified law enforcement, and offered credit monitoring. Notification sent July 15, 2022.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 8 days

discovery → filing · 21 weeks / 144 days

Feb 13, 2022

Begins

Feb 21, 2022

Discovered

Jul 15, 2022

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_38c5c9fdf4c904932022-07-15Verified
Maine State AGbd_9db603f05b9ff16e2022-07-15Candidate
Indiana State AGbd_dc072dba692d16bc2022-07-15Verified

Name: GAS SOUTH, LLC
norm: gas south

Name: GAS SOUTH, LLC
norm: gas south
Industry: Energy & Utilitiesllm

Discovered: Feb 21, 2022
Breach occurred: Feb 13, 2022 – Feb 23, 2022
Undetected for: 8 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 15, 2022
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notifying potentially affected individuals and relevant regulators as required
Initial access: valid_credentials

During the incident: Disconnected these systems from the network
Commenced an investigation
Reported this incident to federal law enforcement
Offering complimentary access to credit monitoring and identity restoration services to you for [CM Length] through Experian
Changes made: Reviewing and enhancing our existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(144 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGJul 15 · first

Maine State AGJul 15 · first

Indiana State AGJul 15 · first

Montana State AGJul 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-397.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 15, 2022
Raw hash: 2983f4013d543746cb7e8c7cac8b5ea276c993f3cd49d89ba2904a62bc995d3f

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityGAS SOUTH, LLC

Victim entityGAS SOUTH, LLC

Incidentdiscovered Feb 21, 2022

Stated responseDisconnected these systems from the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov