MalwareEnergy & UtilitiesUtilitiesRansomwareCapture Stored DataData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

DIVERSIFIED GAS & OIL CORPORATION

bd_6152aff53228a8b3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 25, 2020

Filed

Mar 4, 2021

To disclose

14 weeks

Affected · nationwide

531 in this filing

Linked

7 filings

Confidence

67%

Full breach record for DIVERSIFIED GAS & OIL CORPORATION →

Diversified Gas & Oil Corporation notified Montana AG of a malware incident discovered Nov 25, 2020. Unauthorized access affected ~53 Montana residents, exposing names, addresses, and SSNs. DGOC engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 99 days

Nov 25, 2020

Discovered

Mar 4, 2021

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_0b72bd2acd85061d2021-03-04Verified by operator
California State AGbd_10dab56a2a8fb4c72021-01-27 · +36dVerified
Maine State AGbd_2555950badecff1a2021-01-27 · +36dCandidate
Massachusetts State AGbd_78e980f3ac89b9892021-01-27 · +36dVerified

Show 2 more filings ↓up to 36d gap

Montana State AGbd_bf190fde1c5e1c022021-01-27 · +36dVerified
Indiana State AGbd_e12a2bf250d57bea2021-01-27 · +36dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: DIVERSIFIED GAS & OIL CORPORATION
norm: diversified gas oil
Industry: Energy & Utilitiesllm

Discovered: Nov 25, 2020
Materiality determined: —
Notification sent: Jan 27, 2021
Affected individuals: 53state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Montana Department of Justice Office of Consumer Protection

During the incident: Worked to remove the malware infection
Launched an investigation, with assistance from third-party computer specialists
Conducted a review of the impacted information
Notified law enforcement
Undertaken a review of its information security program, including with the support of leading outside security firms
Implemented additional security measures to mitigate the risks or consequences of future cyber-attacks
Offering individuals access to 24 months of free credit monitoring and identity protection services through IDX
Providing guidance on how to better protect against identity theft and fraud
Notified the three major consumer reporting agencies of this incident
Changes made: Undertaken a review of its information security program
Implemented additional security measures to mitigate the risks or consequences of future cyber-attacks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(99 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

California State AGJan 27 · first

Maine State AGJan 27 · first

Massachusetts State AGJan 27 · first

Montana State AGJan 27 · first

Indiana State AGJan 27 · first

Maine State AG+36d

Montana State AG+36d · this page

Pattern: first filing Jan 27 (CA), last Mar 4 (MT) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/div-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2021
Raw hash: 9225e34e90ae196627142339f752a31368b95c8c632f4919078b280b48a26a97

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityDIVERSIFIED GAS & OIL CORPORATION

Incidentdiscovered Nov 25, 2020

Stated responseWorked to remove the malware infection

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov