Kenai Drilling Limited

On May 22, 2025, the California Attorney General disclosed a data breach at Kenai Drilling Limited, which took place between May 17 and May 18, 2025. Unauthorized actors infiltrated the company’s Document File Server, gaining access to sensitive employee records. The compromised data included names, Social Security numbers, and contact details of approximately 200 employees. The breach exposed personally identifiable information (PII), raising concerns over identity theft, financial fraud, and potential misuse of the stolen data. While the attack was contained to internal systems, the exposure of such critical employee information underscores significant vulnerabilities in the company’s cybersecurity defenses. The incident highlights the growing threat of targeted cyber intrusions aimed at extracting high-value personnel data for malicious purposes.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-603095

TPRM report: https://www.rankiteo.com/company/kenai-drilling-limited

"id": "ken724082025",
"linkid": "kenai-drilling-limited",
"type": "Breach",
"date": "5/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '0 (200 employees affected)',
                        'industry': 'Oil & Gas / Drilling',
                        'location': 'California, USA',
                        'name': 'Kenai Drilling Limited',
                        'type': 'Company'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '200',
                 'personally_identifiable_information': ['names',
                                                         'social security '
                                                         'numbers',
                                                         'contact details'],
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2025-05-22',
 'date_publicly_disclosed': '2025-05-22',
 'description': 'The California Attorney General reported a data breach '
                'involving Kenai Drilling Limited on May 22, 2025. The breach '
                'occurred between May 17 and May 18, 2025, when unauthorized '
                "parties hacked into the company's Document File Server, "
                'accessing sensitive employee information including names, '
                'social security numbers, and contact details. Approximately '
                '200 employees were affected.',
 'impact': {'data_compromised': ['names',
                                 'social security numbers',
                                 'contact details'],
            'identity_theft_risk': 'High (SSNs exposed)',
            'systems_affected': ['Document File Server']},
 'initial_access_broker': {'high_value_targets': ['Employee PII']},
 'investigation_status': 'Reported (ongoing investigation likely)',
 'references': [{'date_accessed': '2025-05-22',
                 'source': 'California Attorney General'}],
 'regulatory_compliance': {'regulations_violated': ['Potential California '
                                                    'Consumer Privacy Act '
                                                    '(CCPA) violations'],
                           'regulatory_notifications': ['California Attorney '
                                                        'General']},
 'response': {'communication_strategy': 'Public disclosure via California '
                                        'Attorney General'},
 'title': 'Kenai Drilling Limited Data Breach - May 2025',
 'type': 'Data Breach'}