HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIMediumContained
Kern Oil & Refining Co.
bd_cac7e6b0439a559d · schema v1 · pii pii-v1
Full breach record for Kern Oil & Refining Co. →Kern Oil & Refining Inc. (dba Kern Energy) notified the New Hampshire Attorney General of a security incident in August 2025 where an unauthorized third party gained access to systems. One NH resident was affected. No evidence of data theft was found. Kern engaged forensic experts, notified law enforcement, and provided 24 months of credit monitoring. Notices were mailed on Nov 12, 2025.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_27210e2d0ad77511California State AGfiled 2025-11-24(3d gap)Candidate
- bd_e312f6f33b2643a7Indiana State AGfiled 2025-11-12(9d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/kern-oil-refining-kern-energy-20251121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 21, 2025
- Raw hash
- 1fedaaf1b4ec6ef28ea327b1e4c3d24a4970e96efcd3fd8e61ee4e0bb4245d42
Reporting entity
- Name
- Baker Botts L.L.P.norm: baker botts
Victim entity
- Name
- Kern Oil & Refining Co.norm: kern oil refining
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Nov 12, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.