CITGO PETROLEUM CORPORATION
ent_019ed0a27ae5a3ab1fa36d754d117408
Disclosures
7
State AG · 5 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
4,611
nationwide · State AG TX
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CITGO PETROLEUM CORPORATION
- Normalized
- citgo petroleum— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- YX52P86PXMLYDOTUQ225
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- CITGO HOLDING, INC.— per GLEIF relationship records
Disclosure history (7)newest first
- Texas State AGas victim2026-09-25
CITGO Petroleum Corporation based in Houston, Texas, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-01-27 and reported on 2026-09-25. 1,907 Texas residents were affected. 4,611 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Health Insurance Information;Other;Date of Birth. Consumers were notified via U.S. Mail;Email.
- New Hampshire State AGas victim2026-08-31
CITGO Petroleum Corporation notified the NH Attorney General of a data breach affecting one NH resident. The incident occurred at Paylogix, LLC, a subcontractor of CITGO's vendor Mercer. Ransomware activity was identified in November 2025, with unauthorized access between Nov 13-18, 2025. CITGO first learned of the incident on Jan 27, 2026, via a law firm advertisement. Affected data includes name, SSN, DOB, and health insurance info. The threat actor is associated with the 'Akira' group. CITGO is offering 24 months of credit monitoring.
- Indiana State AGas victim2026-08-26
CITGO Petroleum Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2025-11-13 and was reported on 2026-08-26. 75 Indiana residents were affected. 4,611 individuals affected in total.
- Massachusetts State AGas victim2026-08-01
CITGO Petroleum Corporation notified Massachusetts residents that a third-party vendor, Paylogix, LLC, experienced a data breach affecting personal information of CITGO employees and their dependents. The incident occurred between November 13 and November 18, 2025, within Paylogix's systems. CITGO became aware of the impact on its individuals on July 27, 2026. Affected data may include names, addresses, and Social Security numbers. CITGO is offering 24 months of credit monitoring. Paylogix has contained the incident and implemented additional security measures.
- California State AGas victim2013-12-18
CITGO Petroleum Corporation reported a data security breach to the California Attorney General. The breach occurred on October 9, 2013. The provided source document contains only the filing metadata and an empty attachment placeholder; no narrative details regarding the nature of the breach, data types affected, or number of individuals impacted are available in the text.
- Massachusetts State AGas victim2013-12-11
CITGO Petroleum Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-12-11. 15 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2013-12-06
CITGO Petroleum Corporation notified the NH Attorney General of a data security incident discovered on Oct 9, 2013. Unencrypted SSNs and financial info for 2 NH residents were found on a shared network drive accessible to all employees. No unauthorized access was found. Notices were sent Nov 27, 2013, with 1-year credit monitoring offered.