Permian Resources Corporation

Permian Resources Corporation notified the Idaho Attorney General of a cybersecurity incident affecting 2 Idaho residents. An unknown third party gained unauthorized access to two employee email accounts via a phishing scheme involving stolen credentials. The incident occurred between November 21, 2023, and December 11, 2023, and was contained by December 11, 2023. Affected data included names, addresses, Social Security numbers, and tax identification numbers. The company engaged legal and forensic firms to investigate.

Permian Resources Corporation notified Vermont consumers of a security incident occurring December 8-11, 2023, where phishing emails led to unauthorized access to employee email accounts. The investigation concluded with no confirmation that consumer data was accessed, though it could not rule out the possibility. Affected individuals were offered 12 months of credit monitoring.

Permian Resources Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2023-12-08 and was reported on 2024-03-25. 9 Indiana residents were affected. 1,926 individuals affected in total.