DataBreachInformation.com
Investigation OpenOregon AG filing · July 30, 2026

SM Energy Company Reports Data Incident to Oregon AG

SM Energy Company reported a data security incident to the Oregon Attorney General on July 30, 2026. This report follows an event on May 15, 2026, where unauthorized access to systems may have compromised personal information. The company states the incident remains under investigation.

State
Oregon
Breach date
May 15, 2026
Reported
July 30, 2026

SM Energy Company, an energy producer, filed a data breach notification with the Oregon Attorney General on July 30, 2026. This filing indicates that the company experienced a security incident affecting personal information. The event was identified as occurring on or about May 15, 2026.

According to the official filing, the incident involved unauthorized access to some of SM Energy Company's systems. While the specific nature of the compromise is still being investigated, it could have exposed personal information managed by the company. SM Energy Company is continuing its investigation into the scope and nature of the breach.

When personal information is involved in a security incident, it creates risks for those affected. This can include potential misuse of the information by unauthorized parties. Individuals who receive a direct notification from SM Energy Company should carefully review that communication for specific details relevant to their situation.

To help protect against potential misuse of your information, it is generally recommended to monitor account statements and explanation of benefits for any suspicious activity. Consider placing a fraud alert or security freeze on your credit reports with the three major credit bureaus. Remain cautious of unsolicited communications, especially those asking for personal details.

This information is based on public records filed with the Oregon Attorney General's office. SM Energy Company has stated that the incident remains under active investigation to understand its full impact. Updates, if available, would typically be provided directly by the company to affected individuals.

More Oregon data breach cases