Social EngineeringPhishingStolen CredentialsData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Permian Resources Corporation
bd_6311d921a43f4be9 · schema v1 · pii pii-v1
Full breach record for Permian Resources Corporation →Permian Resources Corporation notified the Idaho Attorney General of a cybersecurity incident affecting 2 Idaho residents. An unknown third party gained unauthorized access to two employee email accounts via a phishing scheme involving stolen credentials. The incident occurred between November 21, 2023, and December 11, 2023, and was contained by December 11, 2023. Affected data included names, addresses, Social Security numbers, and tax identification numbers. The company engaged legal and forensic firms to investigate.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_105cf2906e98e00eVermont State AGfiled 2024-03-25(9d gap)Verified
- bd_3370347684749bf0Indiana State AGfiled 2024-03-25(9d gap)Verified
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2024/04/4-3-2024-Permian-Resources-Corporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 3, 2024
- Raw hash
- 2aa9a87d621ef5450c57ad41e405e4f6252aba2d6ba26e8814dc3a9392fac097
Reporting entity
- Name
- Permian Resources Corporationnorm: permian resources
Victim entity
- Name
- Permian Resources Corporationnorm: permian resources
Incident
- Discovered
- Dec 11, 2023
- Materiality determined
- —
- Notification sent
- Mar 25, 2024
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 16 weeks(114 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.