Oil Provider, SM Energy, Hit in Attack

October 4, 2026

INCIDENT

Denver, Colorado-based oil exploration firm, SM Energy Company, suffered a cyberattack in May where personally identifiable information ended up stolen in the hack.
SM Energy ended up hit in the attack May 15, where unauthorized threat actors gained access to certain company systems.
“Based on our investigation, we determined on June 30, 2026, that an unauthorized third party accessed certain SM Energy systems and obtained files containing certain of your personal information,” the company said in a notice mailed out to victims in July.

Incident Date

May 15, 2026

Estimated Cost

Unknown at this time

Type of Malware

No Malware identified

Threat Source

No threat source identified

Industries

Oil & Gas

Impacts

IT