DisclosureLens
HackingEnergy & UtilitiesUtilitiesCustomer Data InvolvedGovernment IDHighContained

Colonial Pipeline Company

bd_8a4478baa1fd0c59 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 1, 2021

Filed

Aug 13, 2021

To disclose

6 weeks

Affected · nationwide

5,8101 in this filing

Linked

5 filings

Confidence

50%
Full breach record for Colonial Pipeline Company →3 incidents on file

Colonial Pipeline Company experienced an external system breach on May 6, 2021, which was discovered on July 1, 2021. The breach affected one Maine resident, compromising their Social Security Number. The company provided two years of identity restoration and credit monitoring services through Experian.

Maine clockDiscovered Jul 1, 2021 → Filed with AG Aug 13, 202143d ⏱ ME AG >30d6 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 56 days
discovery → filing · 6 weeks / 43 days

May 6, 2021

Begins

Jul 1, 2021

Discovered

Aug 13, 2021

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Indiana State AGAug 13 · first
Montana State AGAug 13 · first
Massachusetts State AGAug 13 · first
Maine State AGAug 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.