HackingEnergy & UtilitiesUtilitiesCustomer Data InvolvedIdentity (basic)Government IDMediumContained

SANDRIDGE ENERGY, INC.

bd_f11f3d024e9a0c25 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 7, 2022

To disclose

—

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for SANDRIDGE ENERGY, INC. →

SandRidge Energy, Inc. notified the New Hampshire Attorney General of a security incident on October 25, 2021, where an unauthorized party accessed network data. One NH resident was affected, with their name and SSN at risk. SandRidge engaged third-party specialists, isolated systems, and offered 12 months of credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 25, 2021

Begins

Apr 7, 2022

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_205eaabf142c3ea82022-03-31 · +7dCandidate
Maine State AGbd_45b803df7023dbe72022-03-31 · +7dVerified by operator
Massachusetts State AGbd_ef1156c1e0c606932022-03-31 · +7dVerified
Indiana State AGbd_ffb295226d088e232022-03-31 · +7dVerified

Name: SANDRIDGE ENERGY, INC.
norm: sandridge energy

Name: SANDRIDGE ENERGY, INC.
norm: sandridge energy
Industry: Energy & Utilitiesllm

Discovered: —
Breach occurred: Oct 25, 2021
Materiality determined: —
Notification sent: Mar 31, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Engaged third-party specialists to assist with determining the nature and scope of the incident
Isolated its systems
Launched a thorough review to determine the type of information contained in the files
Identify potentially affected parties
Obtain up-to-date address information for individual notification
Providing written notice of this incident to the New Hampshire resident
Offering complimentary credit monitoring and identity protection services offered through Equifax for 12 months
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGMar 31 · first

Maine State AGMar 31 · first

Massachusetts State AGMar 31 · first

Indiana State AGMar 31 · first

New Hampshire State AG+7d · this page

Pattern: first filing Mar 31 (MT), last Apr 7 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sandridge-energy-20220407.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 7, 2022
Raw hash: 2cba7a55f82cc860f0004d9149da3db02a9a0377a9b5375ba6bd272720bb2203

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySANDRIDGE ENERGY, INC.

Victim entitySANDRIDGE ENERGY, INC.

IncidentUnauthorized Access

Stated responseEngaged third-party specialists to assist with determining the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov