Genesis Energy, L.P. notified the New Hampshire Attorney General of a security incident affecting 4 NH residents. On June 1, 2023, Genesis detected a cyberattack exploiting a previously unknown vulnerability (zero-day) in MOVEit software by Progress Software. The attacker, identified as Lace Tempest (cl0p ransomware group), exfiltrated employee and dependent PII. Genesis patched the vulnerability, engaged law enforcement, and offered identity theft protection services.
Affected (this filing): 4