Delek US Energy Data Breach Compromises Social Security Numbers

Delek US Energy Inc, a publicly traded downstream energy company headquartered in Brentwood, Tennessee, disclosed a data breach that exposed sensitive personal information belonging to consumers.

The breach was reported to the Texas Attorney General on Oct. 16, 2026. The total number of individuals affected across the United States remains undisclosed, although the incident so far impacted 1,666 Texas residents.

On Aug. 19, 2026, a threat actor using the name "Helix" posted a listing on the Tor network claiming to be selling data stolen from Delek US Energy. The stolen data allegedly totaled approximately 759.20 GB. The exact contents of the data that Helix claimed to possess have not been independently confirmed.

The personal information confirmed by official reports to have been exposed in the incident included names, Social Security numbers and driver's license number.

Delek US Energy's response to the breach

Delek US Energy is notifying affected individuals by U.S. Mail. Consumers who may have been affected by the breach should watch for a notification letter from the company in the coming weeks. Individuals who receive a notification letter should follow the instructions provided and look for information about any protective services the company may be making available.