Trinity Petroleum Management Data Breach Settlement Reached After 2024 Cyberattack
A class action settlement has been finalized for individuals affected by a targeted cyberattack on Trinity Petroleum Management LLC and affiliated companies Rimrock Resource Operating LLC, Confluence DJ LLC, and Validus Energy II Midcon LLC between October 10 and 14, 2024. The breach potentially exposed sensitive personal data, including names, addresses, and Social Security numbers, prompting a lawsuit alleging inadequate security measures.
Who Is Eligible?
U.S. residents who received a breach notification from Trinity Petroleum Management may qualify for compensation. Eligible individuals must file a claim by June 29, 2026, to receive benefits.
Compensation Options
Affected individuals can claim one or more of the following:
- Up to $5,000 for documented out-of-pocket losses (e.g., identity theft expenses, credit monitoring fees, ID replacement costs).
- Up to $100 for lost time (up to four hours at $25/hour) spent addressing the breach.
- A one-time $55 cash payment for those not claiming reimbursements.
- Three years of CyEx Identity Defense Complete credit monitoring, including $1 million in identity theft insurance, dark web scanning, and real-time credit monitoring.
How to File a Claim
Claims can be submitted online (using a unique ID and PIN from the settlement notice) or via mail/email to the settlement administrator. Documentation is required for reimbursement claims but not for lost time or the $55 payment. Payments will be issued by August 28, 2026, via check, PayPal, Venmo, or Zelle.
Settlement Fund Allocation
The settlement covers:
- Up to $350,000 in attorneys’ fees.
- $15,000 in service awards for class representatives.
- Credit monitoring costs (based on valid claims).
- The remaining funds will be distributed to eligible class members.
Background & Legal Outcome
The lawsuit alleged that Trinity Petroleum and its affiliates failed to protect sensitive data, leading to the breach. While the defendants deny wrongdoing, the settlement was reached to avoid prolonged litigation and provide restitution to affected individuals. The final approval hearing is scheduled for July 20, 2026.
Source: https://www.claimdepot.com/settlements/trinity-petroleum-settlement
Validus Energy cybersecurity rating report: https://www.rankiteo.com/company/validus-energy
Rimrock Resource Operating, LLC cybersecurity rating report: https://www.rankiteo.com/company/rimrock-resource-operating-llc
Trinity Energy Services cybersecurity rating report: https://www.rankiteo.com/company/trinity-energy-services
Confluence Resources, LLC. cybersecurity rating report: https://www.rankiteo.com/company/confluence-resources-llc.
"id": "VALRIMTRICON1777652952",
"linkid": "validus-energy, rimrock-resource-operating-llc, trinity-energy-services, confluence-resources-llc.",
"type": "Breach",
"date": "10/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'U.S. residents who received a '
'breach notification',
'industry': 'Oil & Gas',
'location': 'U.S.',
'name': 'Trinity Petroleum Management LLC',
'type': 'Company'},
{'customers_affected': 'U.S. residents who received a '
'breach notification',
'industry': 'Oil & Gas',
'location': 'U.S.',
'name': 'Rimrock Resource Operating LLC',
'type': 'Company'},
{'customers_affected': 'U.S. residents who received a '
'breach notification',
'industry': 'Oil & Gas',
'location': 'U.S.',
'name': 'Confluence DJ LLC',
'type': 'Company'},
{'customers_affected': 'U.S. residents who received a '
'breach notification',
'industry': 'Oil & Gas',
'location': 'U.S.',
'name': 'Validus Energy II Midcon LLC',
'type': 'Company'}],
'customer_advisories': 'Breach notifications sent to affected individuals '
'with claim instructions',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (Personally Identifiable '
'Information)',
'type_of_data_compromised': ['Names',
'Addresses',
'Social Security numbers']},
'date_detected': '2024-10-10',
'description': 'A class action settlement has been finalized for individuals '
'affected by a targeted cyberattack on Trinity Petroleum '
'Management LLC and affiliated companies between October 10 '
'and 14, 2024. The breach potentially exposed sensitive '
'personal data, including names, addresses, and Social '
'Security numbers, prompting a lawsuit alleging inadequate '
'security measures.',
'impact': {'data_compromised': 'Names, addresses, Social Security numbers',
'financial_loss': "$350,000 (attorneys' fees) + $15,000 (service "
'awards) + credit monitoring costs',
'identity_theft_risk': 'High (exposure of Social Security numbers)',
'legal_liabilities': 'Class action settlement'},
'investigation_status': 'Settlement finalized',
'post_incident_analysis': {'root_causes': 'Alleged inadequate security '
'measures'},
'references': [{'source': 'Settlement Notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Breach notifications sent to affected '
'individuals'},
'title': 'Trinity Petroleum Management Data Breach Settlement',
'type': 'Data Breach'}