2021-09-24 STAR GROUP, L.P. Cybersecurity Incident

Page last updated on April 11, 2024

STAR GROUP, L.P. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2021-09-24 16:30:27 EDT.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date: 2021-07-17
Disclosure Date: 2021-09-24
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2021-09-24

STAR GROUP, L.P. filed an 8-K at 2021-09-24 16:30:27 EDT
Accession Number: 0001564590-21-048857

Item 8.01 Other Events.

On July 17, 2021, we detected a security incident that resulted in the encryption and/or disabling of certain of our information technology systems. Promptly upon discovery of the incident, we launched an investigation with the assistance of a data forensics expert, notified law enforcement, and took steps to address the incident and restore operations. Although our investigation of the incident is ongoing, at this time we do not believe any personal information belonging to customers was involved. However, we believe that an unauthorized third party extracted and/or accessed personal information and/or protected health information residing on some of the affected systems that relates to employees of one or more of our operating subsidiaries. As a precautionary measure, we have informed all of our employees about this incident and will provide required notices to all employees whose personal or protected health information was involved. In addition, we are in the process of evaluating our existing information security measures and determining whether or where they can be strengthened. We have continued to serve our customers without interruption and have maintained business continuity since the incident. Currently, we do not anticipate that this incident will have a material adverse effect on our business, operations or financial results. We have insurance coverage for certain expenses and potential liabilities of this nature and we have and will continue to pursue coverage for a significant portion of the costs related to the incident. We cannot be certain that the steps we have taken will prevent a similar incident or cyber-attack or system-wide failure, which could be material.

Company Information