HackingEnergy & UtilitiesUtilitiesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)LowContained

Opportune

bd_c0bd63b6ff77e37d · schema v1 · pii pii-v2

Severity

Low

Discovered

Aug 18, 2026

Filed

Sep 18, 2026

To disclose

4 weeks

Affected

Not disclosed

Linked

8 records

Confidence

69%

Full breach record for Opportune →2 incidents on file

Opportune LP, an oil & gas industry service provider, experienced a cybersecurity incident where an unauthorized actor gained access to its network on or about June 22, 2026. The company discovered the incident on August 18, 2026, after forensic investigation confirmed that impacted systems contained personal information, specifically full names. The incident affected residents in multiple states including California, Iowa, Maryland, Massachusetts, New Mexico, New York, North Carolina, Oregon, Rhode Island, and Washington D.C. Opportune contained the threat, engaged external cybersecurity professionals, and is offering complimentary credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d4 weeks discovery → filing

Incident timeline

undetected · 57 days

discovery → filing · 4 weeks / 31 days

Jun 22, 2026

Begins

Aug 18, 2026

Discovered

Sep 18, 2026

Filed

This filing is one of 8 records about the same incident.View merged incident

A leak claim by chaos about this victim was first seen 72 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitechaosbd_7447dfaf65054f502026-07-08 · +72dVerified by operator

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_768dda15f14490b32026-09-18Verified by operator
Indiana State AGbd_c5b5a32edeb27a462026-09-17 · +1dVerified
Texas State AGbd_acbc52bb1cf6cf972026-09-21 · +3dVerified by operator
New Hampshire State AGbd_cbaa1a309c5d785c2026-09-21 · +3dVerified

Show 2 more filings ↓up to 17d gap

Vermont State AGbd_8dd46f955bcc7b212026-09-25 · +7dVerified
Massachusetts State AGbd_5a09eaa22f42317e2026-09-01 · +17dVerified by operator

Name: Opportune
norm: opportune
Domain: opportune.com

Name: Opportune
norm: opportune
Domain: opportune.com
Industry: Energy & Utilitiesllm

Discovered: Aug 18, 2026
Breach occurred: Jun 22, 2026
Undetected for: 57 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Immediately worked to contain the threat and secure our internal environment
Commenced a prompt and thorough investigation into the incident
Worked very closely with external cybersecurity professionals experienced in handling these types of situations
Conducted extensive forensic investigation and complex manual document review
Offering complimentary access to Triple Bureau Credit Monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Massachusetts State AGSep 1 · first

Indiana State AG+16d

Vermont State AG+17d

California State AG+17d · this page

Texas State AG+20d

New Hampshire State AG+20d

Vermont State AG+24d

Pattern: first filing Sep 1 (MA), last Sep 25 (VT) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-629948
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 18, 2026
Raw hash: bf6ba5de42a182da8764234489f77073e5589a7bb441a6a4a49d27e8c4e2294b

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityOpportune

Victim entityOpportune

Incidentdiscovered Aug 18, 2026

Stated responseImmediately worked to contain the threat and secure our internal environment

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov