Eland Energy Data Breach Affects 18,237 Individuals

What Happened?

In the early hours of January 19, 2024, Eland Energy, Inc. and its affiliates experienced a significant security incident when an unauthorized user gained access to their virtual server. This breach was promptly identified, and immediate actions were taken to terminate the unauthorized access. Law enforcement was notified, and a third-party forensics team was engaged to determine the extent of the breach.

By January 30, 2024, it was confirmed that the server contained personally identifiable information (PII), including names, addresses, dates of birth, phone numbers, and Social Security numbers. A total of 18,237 individuals across the United States were affected, with 20 of those being residents of Maine. The company has since been working diligently to address the breach and prevent future occurrences.

What Information Was Involved?

The data accessed during the breach varied by individual but may include sensitive details such as:

• First and last names
• Home addresses
• Dates of birth
• Telephone numbers
• Social Security numbers

What Eland Energy Is Doing

Eland Energy has taken steps to enhance their security measures. These include implementing additional security controls and offering identity theft protection services through IDX, A ZeroFox Company. Affected individuals are entitled to 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services.

To enroll in these services, affected individuals can use the Enrollment Code provided in their notification letter, visit IDX's response page, or scan the QR code included in the letter.

What You Can Do

If you believe you were affected by this breach, it is crucial to stay vigilant and take steps to protect your identity:

1. Enroll in IDX Identity Protection Services: Use the enrollment code from your notification letter to activate this service.
2. Monitor Your Accounts: Keep an eye on your bank statements and credit reports for any unauthorized activity.
3. Place a Fraud Alert: Contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) to place a fraud alert on your credit reports.
4. Consider a Security Freeze: This prevents credit, loans, and services from being approved in your name without your consent.
5. Report Any Suspicious Activity: If you detect any suspicious activity, report it immediately to IDX and consider filing a report with local law enforcement or the Federal Trade Commission.

For more detailed steps and additional resources, please refer to the enclosed Recommended Steps document included in your notification letter.

For More Information

If you have any further questions or need assistance, please do not hesitate to contact IDX's customer service or visit their response page. You can also find more information about protecting your identity on the Maine Attorney General's website.

Eland Energy deeply regrets any inconvenience or concern this incident may have caused and is committed to fully resolving the situation and restoring trust with all affected individuals.