MalwareEnergy & UtilitiesUtilitiesRansomwareData EncryptedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

Kenai Drilling

bd_c6cdc8da250b11be · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 19, 2025

Filed

May 22, 2025

To disclose

3 days

Affected

Not disclosed

Confidence

65%

Full breach record for Kenai Drilling →

Kenai Drilling Limited experienced a cybersecurity breach between May 17-18, 2025, discovered on May 19, 2025. Unauthorized parties hacked the company's Document File Server, encrypting files containing employee names, SSNs, wage info, addresses, emails, and phone numbers. The company engaged network security consultants and the FBI. Affected employees are offered 12 months of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

California clockDiscovered May 19, 2025 → Notified May 22, 20253d ✓ CA 60-day OK3 days discovery → filing

Incident timeline

undetected · 2 days

discovery → filing · 3 days

May 17, 2025

Begins

May 19, 2025

Discovered

May 22, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Kenai Drilling
norm: kenai drilling
Domain: kenaidrilling.com

Name: Kenai Drilling
norm: kenai drilling
Domain: kenaidrilling.com
Industry: Energy & Utilitiesllm

Discovered: May 19, 2025
Breach occurred: May 17, 2025 – May 18, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 22, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the FBI

During the incident: Working with network security consultants to understand and address the reasons for and the scope of the breach
Working with law enforcement and the FBI to investigate this incident
Offering a complimentary 12-month membership of Experian’s IdentityWorksSM
Changes made: Oversee any additional security measures designed to prevent a recurrence of such an attack
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 3 days(3 days from discovery to filing)
Compliance flags: CA 60-day OK · 3d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: May 19, 2025
→ Notified: May 22, 2025
3d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: May 19, 2025 → Notified: May 22, 2025	3d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-603095
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 22, 2025
Raw hash: 8b9acaacb886fdd69ad63720878f68cd21caa1e915e0fe23ae8b9a31bb20428a

Reporting entityKenai Drilling

Victim entityKenai Drilling

Incidentdiscovered May 19, 2025

Stated responseWorking with network security consultants to understand and address the reasons for and the scope of the breach

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov