Gas South LLC

Gas South LLC suffered a data breach caused by external unauthorized access between February 13, 2022, and February 23, 2022, compromising the personal information of 38,674 individuals. Among the exposed data were the Social Security numbers of at least 3 Maine residents, though the full scope of the breach may include broader sensitive information. The company detected the incident and issued written notifications to affected individuals on July 15, 2022, nearly five months after the breach occurred. In response, Gas South is providing 12 months of free credit monitoring and identity restoration services via Experian to mitigate potential financial and reputational harm to victims. The delay in disclosure and the nature of the stolen data particularly Social Security numbers heighten risks of identity theft, fraud, and long-term financial consequences for those impacted. The breach underscores vulnerabilities in the company’s cybersecurity defenses against external threats, though no ransomware or broader systemic disruption was reported.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/976742a7-101d-4270-bc7f-fdbac4ed6ec5.shtml

TPRM report: https://www.rankiteo.com/company/gas-south

"id": "gas1024090725",
"linkid": "gas-south",
"type": "Breach",
"date": "2/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 38674,
                        'industry': 'Energy/Utilities (Natural Gas Provider)',
                        'location': 'United States (Georgia-based, but breach '
                                    'reported in Maine)',
                        'name': 'Gas South LLC',
                        'type': 'Corporation'}],
 'attack_vector': 'External Unauthorized Access',
 'customer_advisories': '12 months of credit monitoring and identity '
                        'restoration services offered via Experian',
 'data_breach': {'number_of_records_exposed': 38674,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Social Security numbers']},
 'date_publicly_disclosed': '2022-07-15',
 'description': 'The Maine Office of the Attorney General reported that Gas '
                'South LLC experienced a data breach due to external '
                'unauthorized access that occurred between February 13, 2022, '
                'and February 23, 2022. The breach potentially affected 38,674 '
                'individuals, including the Social Security numbers of 3 Maine '
                'residents. Gas South is offering 12 months of credit '
                'monitoring and identity restoration services through '
                'Experian.',
 'impact': {'data_compromised': ['Social Security numbers (3 Maine residents)',
                                 'Other personal information (38,674 '
                                 'individuals)'],
            'identity_theft_risk': 'High (Social Security numbers exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Written notification sent to affected '
                                        'individuals (July 15, 2022)',
              'third_party_assistance': ['Experian (credit monitoring and '
                                         'identity restoration services)']},
 'title': 'Gas South LLC Data Breach (February 2022)',
 'type': 'Data Breach'}