HackingEnergy & UtilitiesUtilitiesStolen CredentialsPhishingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighResolved

AmeriGas Propane

bd_b6f5c33ad7c4452f · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 1, 2013

Filed

Apr 16, 2021

To disclose

—

Affected

10,000scope not determined

Confidence

66%

Full breach record for AmeriGas Propane →4 incidents on file

AmeriGas Propane notified Montana regulators of a breach affecting approximately 10,000 individuals. The incident involved unauthorized access to customer records containing names, addresses, SSNs, and financial account numbers. The attack vector was identified as stolen credentials, likely obtained via phishing. AmeriGas engaged forensic investigators and offered one year of credit monitoring to affected customers.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 100 months / 2996 days

Feb 1, 2013

Begins

Feb 1, 2013

Discovered

Apr 16, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10,000 affectedView incident

Name: AmeriGas Propane
norm: amerigas propane

Name: AmeriGas Propane
norm: amerigas propane
Industry: Energy & Utilitiesllm

Discovered: Feb 1, 2013
Breach occurred: Feb 1, 2013
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 13, 2013
Affected individuals: 10,000scope not determined
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email CollectionT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Montana Department of Justice
Initial access: valid_credentials

During the incident: Engaged a third-party forensic firm to investigate the incident
Notified affected individuals
Offered one year of complimentary credit monitoring services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Ameri-Notif.docx
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2021
Raw hash: f2bd15f8a92497a58d884614d99c697b7f6400c68fe606075089f414b151e1f3

Reporting entityAmeriGas Propane

Victim entityAmeriGas Propane

Incidentdiscovered Feb 1, 2013

Stated responseEngaged a third-party forensic firm to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov