CITGO PETROLEUM CORPORATION
bd_d03660f731b192b5 · schema v1 · pii pii-v2
Full breach record for CITGO PETROLEUM CORPORATION →2 incidents on fileCITGO Petroleum Corporation notified Massachusetts residents that a third-party vendor, Paylogix, LLC, experienced a data breach affecting personal information of CITGO employees and their dependents. The incident occurred between November 13 and November 18, 2025, within Paylogix's systems. CITGO became aware of the impact on its individuals on July 27, 2026. Affected data may include names, addresses, and Social Security numbers. CITGO is offering 24 months of credit monitoring. Paylogix has contained the incident and implemented additional security measures.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 13, 2025
Begins
Jul 27, 2026
Discovered
Aug 1, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- Indiana State AGbd_e4c092e2df0fe5b62026-08-26 · +25dVerified
- New Hampshire State AGAkirabd_d6ceb784b0c5331e2026-08-31 · +30dVerified
- Texas State AGbd_6843d756110e70d52026-09-25 · +55dVerified
Filing propagation · 4 filings · 4 states
View merged incident ↗Pattern: first filing Aug 1 (MA), last Sep 25 (TX) — a 55-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.