[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f16qc42lclasiz":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":18,"affectedCount":18,"affectedCountStatus":19,"affectedCountLowerBound":18,"affectedCountUnit":20,"hasEnglishDescription":4,"severity":21,"dataClasses":22,"description":24,"seoTitle":25,"seoTitleEn":8,"seoDescription":25,"seoDescriptionEn":26,"logoUrl":27,"isVerified":4,"isSensitive":4,"isSpamList":28,"isMalware":28,"company":29},"6a6f7add627957dc41f4a74a","SMEnergy2026","SM Energy 2026 Data Breach","sm-energy-2026","sm-energy.com","2026-05-15T00:00:00.000Z","2026-08-02T17:14:05.837Z","Incident details not publicly disclosed","https:\u002F\u002Foag.ca.gov\u002Fecrime\u002Fdatabreach\u002Freports\u002Fsb24-627422",[14,16,17],"https:\u002F\u002Fago.vermont.gov\u002Fcategories\u002Fsecurity-breach-notices","https:\u002F\u002Fclassactionu.org\u002Fcurrent-data-breaches\u002Fsm-energy\u002F",null,"unknown","people","Unknown",[23],"Social security numbers","\u003Cp>SM Energy Company is a United States oil and natural gas exploration and production company. A notification filed with the California Attorney General lists May 15, 2026 as the date of the data breach associated with SM Energy.\u003C\u002Fp>\u003Cp>The Vermont Attorney General register reports that Social Security numbers were exposed and that nine Vermont residents were affected. That figure covers Vermont residents only; no nationwide total has been publicly disclosed.\u003C\u002Fp>\u003Ch2>Confirmed incident scope\u003C\u002Fh2>\u003Cp>The confirmed elements in this record are SM Energy Company, the May 15, 2026 breach date, and Social Security numbers as the disclosed data type. California and Vermont regulator records align on the organization and the 2026 notification period.\u003C\u002Fp>\u003Cp>Public records do not explain how the incident occurred, when it was discovered, which systems were involved, or its nationwide reach. The record therefore does not infer an attack method, threat actor, or additional exposed fields.\u003C\u002Fp>\u003Ch2>Exposed data and risks\u003C\u002Fh2>\u003Cp>A Social Security number is a persistent identity identifier that cannot be replaced as easily as a password. Exposure can create long-term risks including fraudulent credit applications, tax fraud, and misuse during identity-verification processes.\u003C\u002Fp>\u003Cp>Names, addresses, financial accounts, government identification documents, and other data classes have not been confirmed in the public filings and are not added to this record. Anyone who received a notice should rely on the scope stated in their individual letter.\u003C\u002Fp>\u003Ch2>Immediate protective steps\u003C\u002Fh2>\u003Cp>Affected people can consider placing a free credit freeze with Equifax, Experian, and TransUnion. A freeze makes it harder to open a new account without the identity holder's knowledge and can be temporarily lifted when legitimate access is needed.\u003C\u002Fp>\u003Cp>Credit reports should be reviewed regularly, unfamiliar inquiries or accounts should be disputed promptly, and unusual tax activity should be investigated. Multi-factor authentication also adds protection to accounts that support it.\u003C\u002Fp>\u003Ch2>Notice and phishing checks\u003C\u002Fh2>\u003Cp>Be cautious of fraudulent email, text, or phone messages that use news of the incident as a pretext. Verify a notice through SM Energy's official domain or an independently confirmed contact channel rather than following links in an unexpected message.\u003C\u002Fp>\u003Cp>Do not disclose a full Social Security number, password, or one-time verification code during an unsolicited call. Credit monitoring, compensation, or identity-verification offers that create urgency deserve additional scrutiny.\u003C\u002Fp>\u003Ch2>Organization and event boundary\u003C\u002Fh2>\u003Cp>SM Energy is an independent oil and natural gas exploration and production company headquartered in Denver. This record concerns the 2026 personal-information breach described in regulator notices, not the company's broader energy operations.\u003C\u002Fp>\u003Cp>A state-specific count does not establish that the incident affected only nine people. Until a nationwide total or further data categories are officially disclosed, the overall scope remains unknown.\u003C\u002Fp>\u003Ch2>How to interpret a result\u003C\u002Fh2>\u003Cp>\u003Cstrong>A positive match\u003C\u002Fstrong> means the queried email address appears in a dataset associated with this incident; it does not by itself prove that the person's Social Security number is present. An individual notification letter and credit records provide more specific evidence.\u003C\u002Fp>\u003Cp>A negative result does not prove that a person was unaffected. Anyone who received an official notice should follow its instructions regardless of the search result and continue watching for signs of identity theft.\u003C\u002Fp>","","SM Energy's May 15, 2026 breach exposed Social Security numbers. The nationwide number of affected people has not been publicly disclosed.","https:\u002F\u002Fd1io3yog0oux5.cloudfront.net\u002F_0e9d9e3ac2c501051d9236c708df3e21\u002Fsmenergy\u002Ffiles\u002Ftheme\u002Fimages\u002Flogo.svg",false,{"name":30,"sector":31,"country":32,"website":10,"websiteArchiveUrl":25,"websiteStatus":33,"websiteCheckedAt":12},"SM Energy Company","Energy","United States","active"]