Murex Petroleum Corporation, an oil and gas exploration and production company, experienced an external system breach via hacking on May 27, 2025. The company discovered the breach on January 7, 2026. The Akira ransomware group claimed responsibility for the incident and exfiltrated approximately 25 GB of data. The company secured its network and engaged external cybersecurity professionals to investigate.
The breach exposed names, Social Security Numbers (SSN), and Tax Identification Numbers for an estimated 3,816 individuals across multiple states. At least one resident each in Maine, Massachusetts, New Hampshire, and Vermont were affected. Financial and medical data exposure remains unconfirmed. Murex Petroleum Corporation is the primary data owner and not a vendor in this incident.
Details can emerge later, and notices may be delayed.