SM Energy Data Breach Impacts at least 3.9k: SSNs Exposed

Published
July 31, 2026
Updated
July 31, 2026
SM Energy Data Breach Impacts at least 3.9k: SSNs Exposed
SM Energy
Affected by the data breach? You may be entitled to compensation. Submit a claim today.

SM Energy Co., an independent oil and gas exploration and production company headquartered in Denver, Colorado, disclosed a data breach involving unauthorized access to certain company systems on or around May 15, 2026. The total number of individuals affected nationwide has not been disclosed, but included 3,851 Texas residents, 71 Massachusetts residents and nine Vermont residents.

SM Energy determined on June 30, 2026, that an unauthorized third party had obtained files containing personal information.

On or around May 15, 2026, SM Energy experienced a cybersecurity incident involving unauthorized access to certain company systems, according to the company's notification letter to affected individuals. After becoming aware of the issue, the company began an investigation to determine the nature and scope of the incident.

The investigation found that an unauthorized third party had accessed certain SM Energy systems and obtained files containing personal information. The types of information exposed varied by individual but included names, postal addresses, email addresses, phone numbers and Social Security numbers or taxpayer identification numbers.

The breach was additionally disclosed to the California Attorney General on July 30, 2026. The company is notifying affected individuals by U.S. mail on July 30, 2026.

SM Energy's response to the breach

SM Energy is offering affected individuals 24 months of complimentary identity protection and credit monitoring through Experian IdentityWorks.

Affected individuals must enroll by Oct. 31, 2026, using the activation code included in their notification letter. Enrollment is available online at the Experian IdentityWorks website.

For questions about the breach, SM Energy has set up a dedicated toll-free call center at 1-833-918-6683, available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays. Individuals calling from outside the U.S. and Canada can reach the line at +1-214-393-3260.

SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
SM Energy
Consumers Notification date
Date of Breach
May 15, 2026
Breach Discovered Date
Total People Affected
Information Types Exposed
  • Name of individual
  • Address
  • Social Security Number Information
  • Other
  • Social Security Number
  • Taxpayer Identification Number
  • email
  • phone number
  • postal address
  • social security numbers
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image