HackingUtilitiesVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDHigh

GENESIS ENERGY, L.P.

bd_f25ef7e5d920c9a7 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 1, 2023

Filed

Jun 30, 2023

To disclose

29 days

Affected · nationwide

8,14031 in this filing

Linked

6 filings

Confidence

50%

Full breach record for GENESIS ENERGY, L.P. →2 incidents on file

Genesis Energy, L.P. experienced a data breach impacting 31 Maine residents after a vulnerability in a third-party software was exploited. The breach occurred on May 30, 2023, and was discovered on June 1, 2023. The compromised information included names and Social Security Numbers. Affected individuals were notified on June 30, 2023, and offered 36 months of identity theft protection services through NortonLifeLock.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d29 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 2 days

discovery → filing · 29 days

May 30, 2023

Begins

Jun 1, 2023

Discovered

Jun 30, 2023

Filed

This filing is one of 6 about the same incident.View merged incident

Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

A leak claim by dispossessor about this victim predates this filing by 625 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_fc5bfd4ae97883492023-07-26 · +26dVerified by operator

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGLace Tempestbd_4299f0bb6199b6e02023-06-30Verified by operator
Montana State AGbd_6d4bc6d1871605b12023-06-30Candidate
Indiana State AGbd_999bb66213af41a92023-06-30Verified
Massachusetts State AGbd_a316b6e1a695f07e2023-06-30Verified by operator

Name: GENESIS ENERGY, L.P.
norm: genesis energy
Domain: genesisenergy.com

Name: GENESIS ENERGY, L.P.
norm: genesis energy
Domain: genesisenergy.com

Discovered: Jun 1, 2023
Breach occurred: May 30, 2023
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 30, 2023
Affected individuals: 8,140state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered 36 months of identity theft protection services through NortonLifeLock’s “LifeLock DefenderTM Preferred” product.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: Leak >180dME AG ≤30d · 29d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 1, 2023
→ Filed with AG: Jun 30, 2023
29d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 1, 2023 → Filed with AG: Jun 30, 2023	29d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGJun 30 · first

Montana State AGJun 30 · first

Indiana State AGJun 30 · first

Massachusetts State AGJun 30 · first

Maine State AGJun 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/69fa403e-8686-4cde-a72f-c78f4101af4a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 30, 2023
Raw hash: e89a8d7668cf07360d7ed47971dba55733c1b9d5fed8d9379f523eb43b030f0d

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityGENESIS ENERGY, L.P.

Victim entityGENESIS ENERGY, L.P.

Incidentdiscovered Jun 1, 2023

Stated responseOffered 36 months of identity theft protection services through NortonLifeLock’s “LifeLock DefenderTM Preferred” product.

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov