ONEOK

Summary

A former employee filed a class action lawsuit alleging that ONEOK failed to protect highly sensitive data after a hacking group called Redact breached a small number of cloud-based user accounts and reportedly leaked 67.5 gigabytes of information including names, addresses, Social Security numbers, dates of birth, and financial details. The company stated that unauthorized activity affected limited data, that fewer than 70 people were impacted and all were notified, that federal law enforcement and third-party cybersecurity experts were engaged, and that the incident was resolved with no business or operational impacts.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

A class action lawsuit against ONEOK was reported on October 29, 2026, alleging that the company failed to protect highly sensitive data belonging to its employees. The lawsuit states that on or around October 16, 2026, ONEOK was hacked in a data breach carried out by a group identified as Redact. According to the filing, Redact maintains a data leak site on the dark web where it publishes stolen data in order to pressure organizations that were subject to a data breach. The suit asserts that the types of data potentially exposed could include names, addresses, social security numbers, dates of birth, and financial information. The lawsuit further claims that Redact has reportedly leaked 67.5 gigabytes of sensitive data. The filing includes a statement that before the breach, the employees' private information was private, but that it is now forever exposed and unsecure. The legal action was brought by an attorney who is also pursuing a separate case against another organization, though the plaintiffs in the two matters are different.

ONEOK issued a public statement addressing the incident and characterizing the scope of the unauthorized activity. The company said that unauthorized activity affected limited data accessed from a very small number of cloud-based user accounts. Upon discovery of the activity, ONEOK stated that it promptly contained the incident and secured the affected accounts. The company also said it notified federal law enforcement and began an investigation alongside leading third-party cybersecurity experts. According to ONEOK, the incident has been resolved and there were no business or operational impacts. The company stated that fewer than 70 people were affected and that all affected individuals were notified. ONEOK said it takes the safeguarding of its information and systems seriously and remains committed to maintaining the security of both. When reached for comment, the lawyer who filed the lawsuit declined to speak because of the pending litigation.

Sources

Sources available to members: 1 source.