MalwareEnergy & UtilitiesProfessional ServicesUtilitiesRansomwareStolen CredentialsData ExfiltratedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Blueknight Energy Partners, L.P.

bd_ce3a9f5caeef7130 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 12, 2021

Filed

Feb 12, 2021

To disclose

4 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Blueknight Energy Partners, L.P. →

Blueknight Energy Partners, L.P. notified Montana residents of a January 2021 cyber-attack that compromised employee and former employee data, including names, SSNs, and banking information. The company engaged forensic teams, reported to the FBI, cut off attacker access, and offered one year of Experian IdentityWorks monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 4 weeks / 31 days

Jan 12, 2021

Discovered

Feb 12, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitepysabd_e8234e3c1dc5cd102021-09-09 · +209dVerified by operator

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_3d6f2d49a1423f4d2021-02-12Verified

Name: Blueknight Energy Partners, L.P.
norm: blueknight energy

Name: Blueknight Energy Partners, L.P.
norm: blueknight energy
Industry: Energy & UtilitiesllmProfessional Servicesllm

Discovered: Jan 12, 2021
Materiality determined: —
Notification sent: Feb 12, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to the United States FBI
Initial access: valid_credentials

During the incident: Engaged leading forensic, cyber-recovery first responder, credit reporting, and legal teams
Reported the incident to the United States FBI
Collaborating with FBI in their investigation
Cut off the attacker’s access
Restoring systems
Offering company-paid one-year membership in Experian’s IdentityWorks
Changes made: Rebuilding certain systems and infrastructure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGFeb 12 · first

Montana State AGFeb 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/blueSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 12, 2021
Raw hash: 9067d6bf8eec04b67bfc7f6fbe5eadfcefd1574934c03140b278384a607d3da0

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityBlueknight Energy Partners, L.P.

Victim entityBlueknight Energy Partners, L.P.

Incidentdiscovered Jan 12, 2021

Stated responseEngaged leading forensic, cyber-recovery first responder, credit reporting, and legal teams

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov