HackingEnergy & UtilitiesUtilitiesCustomer Data InvolvedIdentity (basic)LowContained

MUREX PETROLEUM CORPORATION

bd_c1efa654a1ceba3d · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 7, 2026

Filed

Jan 27, 2026

To disclose

20 days

Affected

1state residents only

Linked

9 filings

Confidence

66%

Full breach record for MUREX PETROLEUM CORPORATION →

Murex Petroleum Corporation reported an external system breach (hacking) occurring on May 27, 2025, discovered on January 7, 2026. One Maine resident was affected. The incident involved unauthorized access to files potentially containing personal information. The company engaged external cybersecurity professionals and offered 12 months of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d20 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 225 days

discovery → filing · 20 days

May 27, 2025

Begins

Jan 7, 2026

Discovered

Jan 27, 2026

Filed

This filing is one of 9 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 245 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteakirabd_765558bad22f7e8c2025-06-30 · +211dVerified by operator
Leak Siteakirabd_605df93111f849762025-05-27 · +245dVerified by operator

Regulatory filings (6) · sorted by filing gap

Nebraska State AGbd_15b289258e7374f42026-01-27Candidate
Vermont State AGbd_194759e4e9d2beb12026-01-27Verified
Montana State AGbd_29206e5dd2ea978a2026-01-27Verified
Massachusetts State AGbd_2d474235197917922026-01-27Verified

Show 2 more filings ↓up to 3d gap

Indiana State AGbd_440672c7f491e9952026-01-27Verified
New Hampshire State AGbd_11739785f1f07b5d2026-01-30 · +3dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: MUREX PETROLEUM CORPORATION
norm: murex petroleum
Domain: murexpetroleum.com
Industry: Energy & Utilitiesllm

Discovered: Jan 7, 2026
Breach occurred: May 27, 2025
Undetected for: 225 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 27, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Secured our network
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Conducted a thorough review of the potentially impacted data
Offering 12 months of identity theft protection and credit monitoring via Kroll
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: Leak >180dME AG ≤30d · 20d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 7, 2026
→ Filed with AG: Jan 27, 2026
20d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 7, 2026 → Filed with AG: Jan 27, 2026	20d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Nebraska State AGJan 27 · first

Vermont State AGJan 27 · first

Montana State AGJan 27 · first

Massachusetts State AGJan 27 · first

Indiana State AGJan 27 · first

Maine State AGJan 27 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9ba6f732-3464-4c89-aa66-a0b2ca1394cc.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2026
Raw hash: f1db8924b6e43bb661874a05d1c74425d1b8226d899745761d7f11f18401f084

Linked disclosures

Ransomware claims (2)

Regulatory filings (6) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityMUREX PETROLEUM CORPORATION

Incidentdiscovered Jan 7, 2026

Stated responseSecured our network

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov