On May 22, 2025, the California Attorney General disclosed a data breach at Kenai Drilling Limited, which took place between May 17 and May 18, 2025. Unauthorized actors infiltrated the company’s Document File Server, gaining access to sensitive employee records. The compromised data included names, Social Security numbers, and contact details of approximately 200 employees. The breach exposed personally identifiable information (PII), raising concerns over identity theft, financial fraud, and potential misuse of the stolen data. While the attack was contained to internal systems, the exposure of such critical employee information underscores significant vulnerabilities in the company’s cybersecurity defenses. The incident highlights the growing threat of targeted cyber intrusions aimed at extracting high-value personnel data for malicious purposes.