HackingEnergy & UtilitiesUtilitiesCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Capital Star Oil & Gas, Inc.
bd_f41fa013ce4bf4a1 · schema v1 · pii pii-v1
Full breach record for Capital Star Oil & Gas, Inc. →Capital Star Oil & Gas, Inc. (Houston, TX) detected suspicious network activity on November 3, 2025. A forensic investigation concluded on March 9, 2026, confirming unauthorized access to files containing names and Social Security numbers. Four Maine residents were affected. The company offered 12-month credit monitoring and fraud assistance through Cyberscout/TransUnion. Notification letters were sent March 17, 2026.
Leak gap clock⏱ Leak >90d8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by dragonforce about this victim predates this filing by 134 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_b35460540aea8156Leak Sitedragonforcefiled 2025-12-02(105d gap)Verified
- bd_edaed2bb770072b8Leak Sitedragonforcefiled 2025-11-03(134d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b50dda5b-cb33-4a52-9f2b-c7b7834e6329.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2026
- Raw hash
- d4f80d72cc2041ff221b1dc27b495596c8f6f078d8ebb13bf4678d4edfb55927
Reporting entity
- Name
- Capital Star Oil & Gas, Inc.norm: capital star oil gas
- Domain
- capitalstaroilngas.com
- Industry
- Oil & Gas
Victim entity
- Name
- Capital Star Oil & Gas, Inc.norm: capital star oil gas
- Domain
- capitalstaroilngas.com
- Industry
- Oil & Gas
- Industry
- Energy & Utilitiesllm
Incident
- Discovered
- Mar 9, 2026
- Materiality determined
- Mar 9, 2026
- Notification sent
- Mar 17, 2026
- Affected individuals
- 4
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 9, 2026→ Filed with AG: Mar 17, 20268d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.