Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.
State AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedhigh sensitivity
Affected (total reported)
1,363
Data types
3
Identity (basic) · Government ID · Financial account
Jurisdictions
3
CA IN NH
Linked filings
3
all State AG
Sensitive data
identity_government
Timeline
Earliest sighting first · deep chronology in Litigation Timeline
Breach window
Aug 5, 2025
When the intrusion reportedly occurred, per the linked filings
99 days
3 State AG filingsNov 12, 2025 – Nov 24, 2025ExpandCollapse
INNHCA
🏎️Indiana State AGlinked via multistate filing link · 95%
Kern Oil & Refining Co dba Kern Energy reported a data breach to the Indiana Attorney General. The breach occurred on 2025-08-05 and was reported on 2025-11-12. 2 Indiana residents were affected. 1,363 individuals affected in total.
Affected (this filing): 1,363
⛰️New Hampshire State AGlinked via multistate filing link · 100%
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
bd_cac7e6b0439a559d
Kern Oil & Refining Inc. (dba Kern Energy) notified the New Hampshire Attorney General of a security incident in August 2025 where an unauthorized third party gained access to systems. One NH resident was affected. No evidence of data theft was found. Kern engaged forensic experts, notified law enforcement, and provided 24 months of credit monitoring. Notices were mailed on Nov 12, 2025.
Kern Oil & Refining Co. d/b/a Kern Energy experienced a security incident in August 2025 where an unauthorized third party gained access to systems containing personal information of current and former employees, dependents, and beneficiaries. Affected data includes names, addresses, phone numbers, dates of birth, Social Security Numbers, and health insurance information. The company contained the threat, engaged forensic experts, notified law enforcement, and is offering 24 months of credit monitoring.