Kenai Drilling Limited says unauthorized parties hacked into its Document File Server between May 17 and May 18, 2025, and then accessed and encrypted files stored there. The company describes this as a cyber security breach and notes it is working with network security consultants and law enforcement, including the FBI, to investigate. Attacks that involve breaking into a system and encrypting files are consistent with a ransomware attack, and this kind of incident has been showing up elsewhere in the drilling and oilfield services industry, including a recent ransomware attack claimed against Oilquip Inc.
The letter is addressed to employees whose information was maintained on the affected file server. Kenai Drilling states that the breach did not reach employee personnel files kept internally at the company, but it has not provided a total count of how many people were notified.
What information was exposed?
- Full names
- Social Security numbers
- Wage information
- Home addresses
- Email addresses
- Phone numbers
Kenai Drilling is offering a complimentary 12-month membership to Experian IdentityWorks, which includes credit monitoring and identity restoration support. You must enroll by September 30, 2025 at https://www.experianidworks.com/credit using the activation code included in your letter; you can also call (833) 931-7577 by 5:59 PM CST on September 30, 2025 for help or an alternative to online enrollment.
What should you do now?
- Enroll in the free Experian IdentityWorks membership before the September 30, 2025 deadline, since your Social Security number was involved in this breach.
- Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion — both are free and a freeze is generally the stronger protection since it limits access to your credit report entirely.
- Pull your free credit reports at www.AnnualCreditReport.com and check for accounts you didn’t open, credit inquiries you don’t recognize, or balances that don’t match your statements.
- Notify your bank or credit card issuers about the breach and ask what fraud-monitoring options they offer.
- Sign up for text or email alerts on your financial accounts and follow up immediately on any charge you don’t recognize.
- Because a full Social Security number was exposed, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere, such as on the dark web or in new account applications.
If you have questions, Kenai Drilling can be reached through David A. Uhler, VP Finance, at [email protected] or (805) 937-7871, ext. 11.