SM ENERGY COMPANY
bd_9746211c4cb6ac68 · schema v1 · pii pii-v1
Full breach record for SM ENERGY COMPANY →SM Energy Company experienced a cybersecurity incident on or around May 15, 2026, involving unauthorized access to company systems. An unauthorized third party accessed systems and obtained files containing personal information, including names, addresses, email addresses, phone numbers, and Social Security Numbers/Taxpayer Identification Numbers. The company blocked access, launched an investigation, and reported the incident to law enforcement. Affected individuals are offered two years of complimentary identity protection and credit monitoring through Experian.
J jump to incidentP pin to compareR raw source
Incident timeline
May 15, 2026
Begins
Jul 31, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Vermont State AGbd_01ba18dbedc8a6cb2026-07-31Candidate
- Texas State AGbd_2563ed6edafee2ed2026-07-31Verified
- Oregon State AGbd_1bc0c791f5e8ac232026-07-30 · +1dVerified
- California State AGbd_7ae4a38d57c9220d2026-07-30 · +1dVerified
Show 1 more filing ↓Show fewer ↑up to 6d gap
- New Hampshire State AGbd_c3a672606a5d85032026-08-06 · +6dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Jul 30 (OR), last Aug 6 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.