HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICOTHERLowContained
P2 Energy Solutions
bd_c8c2dd125ddbf948 · schema v1 · pii pii-v1
Full breach record for P2 Energy Solutions →P2 Energy Solutions, a provider of accounting and land management software for the oil and gas industry, disclosed a data breach affecting customers. Unauthorized access occurred between November 8 and 17, 2021. The incident involved the exfiltration of customer names and variable personal data. P2 notified affected individuals in December 2022, offering credit monitoring services. The investigation determined the scope of affected records was limited to specific files containing customer information.
California clockDiscovered Nov 17, 2021 → Notified Dec 19, 2022397d ✗ CA 60-day late13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0e5b5ac5a4a0de1eNew Hampshire State AGfiled 2022-12-19Verified
- bd_2d3adeaa1fefd443Washington State AGfiled 2022-12-19Candidate
- bd_b06a7ca31e8ea164Montana State AGfiled 2022-12-19Verified
- bd_e074f948c5a0a683Maine State AGfiled 2022-12-19Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-560230
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2022
- Raw hash
- 788546cc77755252b8de099d9111b0fa9b40f4c70d2f18e8a4e5050ea06eefd2
Reporting entity
- Name
- P2 Energy Solutionsnorm: p2 energy
Victim entity
- Name
- P2 Energy Solutionsnorm: p2 energy
Incident
- Discovered
- Nov 17, 2021
- Materiality determined
- —
- Notification sent
- Dec 19, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICOTHER
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(397 days from discovery to filing)
- Compliance flags
- CA 60-day late · 397d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 17, 2021→ Notified: Dec 19, 2022397d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.