HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
TIMEC Oil & Gas, Inc.
bd_8c1d5742824183ef · schema v1 · pii pii-v1
Full breach record for TIMEC Oil & Gas, Inc. →TIMEC Oil & Gas, Inc. notified the California Attorney General of a data breach where an unknown actor accessed an employee's email account between April 7 and April 10, 2025. The company became aware of the unauthorized activity on April 8, 2025. The incident involved the potential access or copying of emails and attachments containing Social Security numbers and names. TIMEC secured its systems, launched a third-party investigation, and is offering 12 months of credit monitoring and fraud assistance to affected individuals.
California clockDiscovered Apr 8, 2025 → Notified Apr 2, 2026359d ✗ CA 60-day late51 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_05a0b74b81c104aeMaine State AGfiled 2026-04-02Candidate
- bd_cee173d21ca82cf1Vermont State AGfiled 2026-04-02Verified
- bd_98fa467a073029d6Texas State AGfiled 2026-04-06(4d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-621231
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 2, 2026
- Raw hash
- cc685fb52ddc2e53e64dcb7dff37ef9ab51e3273606eec7b4a230c0cc77ab677
Reporting entity
- Name
- TIMEC Oil & Gas, Inc.norm: timec oil gas
- Domain
- timec.com
Victim entity
- Name
- TIMEC Oil & Gas, Inc.norm: timec oil gas
- Domain
- timec.com
Incident
- Discovered
- Apr 8, 2025
- Materiality determined
- —
- Notification sent
- Apr 2, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 51 weeks(359 days from discovery to filing)
- Compliance flags
- CA 60-day late · 359dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 8, 2025→ Notified: Apr 2, 2026359d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: Apr 2, 2026→ AG copy submitted: Apr 2, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.