Social EngineeringEnergy & UtilitiesUtilitiesPhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

Martin Energy Group Services

bd_6982c4b6bb2064df · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 25, 2021

Filed

Jun 25, 2021

To disclose

22 weeks

Affected

1state residents only

Linked

3 filings

Confidence

65%

Full breach record for Martin Energy Group Services →2 incidents on file

Martin Energy Group Services, LLC notified Montana residents of a phishing incident on January 25, 2021. Malicious links sent to employees led to unauthorized access to three email accounts containing limited PII (names). No evidence of misuse was found. The company engaged forensic experts, reset passwords, and offered one year of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 weeks / 151 days

Jan 25, 2021

Begins

Jan 25, 2021

Discovered

Jun 25, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_8d19ecda4ed20c532021-06-25Verified
New Hampshire State AGbd_5e2537f76c5a5ac72021-07-01 · +6dVerified

Name: Martin Energy Group Services
norm: martin energy
Domain: martinenergygroup.com

Name: Martin Energy Group Services
norm: martin energy
Domain: martinenergygroup.com
Industry: Energy & Utilitiesllm

Discovered: Jan 25, 2021
Breach occurred: Jan 25, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Performed a password reset for the affected accounts
Swiftly engaged a team of third-party forensic experts to investigate
Secured the affected accounts
Offering complimentary identity monitoring services through Kroll
Changes made: Took steps to enhance the security of all information to help prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(151 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJun 25 · first

Montana State AGJun 25 · first · this page

New Hampshire State AG+6d

Pattern: first filing Jun 25 (MA), last Jul 1 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Martin-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 25, 2021
Raw hash: 365eb68df568a2ad5a7cd0f834ebd82cf2807bb67e97b9d52307305eaebf1bb2

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMartin Energy Group Services

Victim entityMartin Energy Group Services

Incidentdiscovered Jan 25, 2021

Stated responsePerformed a password reset for the affected accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov