HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
SM ENERGY COMPANY
bd_7ae4a38d57c9220d · schema v1 · pii pii-v1
Full breach record for SM ENERGY COMPANY →SM Energy Company experienced a cybersecurity incident on May 15, 2026, involving unauthorized access to company systems. An unauthorized third party accessed files containing personal information, including names, addresses, email addresses, phone numbers, and Social Security Numbers/Taxpayer Identification Numbers. The company blocked access, launched an investigation, and notified law enforcement. Affected individuals are offered two years of complimentary identity protection and credit monitoring services through Experian.
California clockConsumers notified Jul 30, 2026 → AG copy submitted Jul 30, 20260d ✓ CA AG copy ≤15d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_01ba18dbedc8a6cbVermont State AGfiled 2026-07-31(1d gap)Candidate
- bd_2563ed6edafee2edTexas State AGfiled 2026-07-31(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-627422
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 30, 2026
- Raw hash
- d2929f0ca7cc0f04a219da30396aeda7907b0f0dbf16b24d2eef3ff3f6f10709
Reporting entity
- Name
- SM ENERGY COMPANYnorm: sm energy
- Domain
- sm-energy.com
Victim entity
- Name
- SM ENERGY COMPANYnorm: sm energy
- Domain
- sm-energy.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Jul 30, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the issue to law enforcement authorities
Compliance
- Compliance flags
- CA AG copy ≤15d · 0d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status California Consumers notified: Jul 30, 2026→ AG copy submitted: Jul 30, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.