HackingEnergy & UtilitiesUtilitiesSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Government IDMediumContained

CITGO PETROLEUM CORPORATION

bd_d03660f731b192b5 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 27, 2026

Filed

Aug 1, 2026

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for CITGO PETROLEUM CORPORATION →3 incidents on file

CITGO Petroleum Corporation notified Massachusetts residents that a third-party vendor, Paylogix, LLC, experienced a data breach affecting personal information of CITGO employees and their dependents. The incident occurred between November 13 and November 18, 2025, within Paylogix's systems. CITGO became aware of the impact on its individuals on July 27, 2026. Affected data may include names, addresses, and Social Security numbers. CITGO is offering 24 months of credit monitoring. Paylogix has contained the incident and implemented additional security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 256 days

Nov 13, 2025

Begins

Jul 27, 2026

Discovered

Aug 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: CITGO PETROLEUM CORPORATION
norm: citgo petroleum

Name: CITGO PETROLEUM CORPORATION
norm: citgo petroleum
Industry: Energy & Utilitiesllm

Discovered: Jul 27, 2026
Breach occurred: Nov 13, 2025 – Nov 18, 2025
Undetected for: 256 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 12, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Attack vector: Third-Party / Supply Chain
Threat actor: External

During the incident: Working with Paylogix and Mercer to obtain more information regarding the incident
Offering 24 months of complimentary Epiq 3-Bureau Credit Monitoring – Plus
Changes made: Paylogix has taken steps to remediate and secure its environment
Paylogix contained the incident
Paylogix implemented additional security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1449-citgo-petroleum-corporation/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2026
Raw hash: 8778bfafa9de6146a9d2a16256271503d26f40b685301b0b3fab50d0e4744974

Reporting entityCITGO PETROLEUM CORPORATION

Victim entityCITGO PETROLEUM CORPORATION

Incidentdiscovered Jul 27, 2026

Stated responseWorking with Paylogix and Mercer to obtain more information regarding the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov