Perry Brothers Oil
October 7, 2025
•[ ransomware, energy, automotive ]
Perry Brothers Oil was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-10-07. Sector: Energy & Utilities. Country: United States of America. Website: perrybrothersoil.com. Perry Brothers Oil Company is an automotive shop specializing in
tires, motor oil, and wheel alignments.
We will upload 20gb of corporate documents soon. Personal employe
e and customers data (passports, driver licenses, personal phones
, addresses, addresses emails, credit card records), confidential
ity agreements, detailed financials and accounting, contracts and
agreements, clients' information, incident reports, NDA, etc.
Pearl River Valley Electric Power Association
November 19, 2025
•[ ransomware, energy, leak ]
Pearl River Valley Electric Power Association was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-19. Sector: Energy & Utilities. Country: United States of America. Website: prvepa.com. PRVEPA is an electric cooperative dedicated to providing safe, de
pendable, and affordable power to the residents of South-Central
Mississippi since 1938.
We will upload 62gb of corporate documents soon. Employee data (d
river licenses, phones, addresses, emails), confidential technolo
gies, financials and accounting, contracts and agreements, client
s' information, NDA, etc.
Mae Krathing Power Company
November 20, 2025
•[ ransomware, energy ]
Mae Krathing Power Company was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Energy & Utilities. Country: Thailand. Website: www.maekratingpower.com.
Sakol Energy Public
November 20, 2025
•[ ransomware, energy ]
Sakol Energy Public was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Energy & Utilities. Country: Thailand. Website: www.sakolenergy.com.
WORLEY.COM
November 21, 2025
•[ ransomware, energy, manufacturing ]
WORLEY.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-21. Sector: Energy & Utilities. Country: Australia. Website: WORLEY.COM. [AI generated] Worley.com is an Australian company providing professional project and asset services in energy, chemical and resources sectors. They aid their customers through entire asset life-cycle, providing global solutions for design and build of new assets; as well as offer maintenance, repair, operations and decommissioning services to optimize their customers' performance.
SUMITOMOCHEMICAL.COM
November 21, 2025
•[ ransomware, manufacturing, healthcare ]
SUMITOMOCHEMICAL.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-21. Sector: Manufacturing. Country: Japan. Website: SUMITOMOCHEMICAL.COM. [AI generated] Sumitomo Chemical Co. Limited is a Japan-based company involved in the petrochemicals, energy, and functional materials sectors. It also deals with construction materials, pharmaceuticals, and agricultural chemicals. Sumitomo Chemical offers a wide range of products and services from raw materials to processed products in each of these areas. Its mission includes resolving societal issues through business activities, implementing sustainable practices, and nurturing a vibrant corporate culture.
INTEROIL.COM.CO
November 21, 2025
•[ ransomware, energy ]
INTEROIL.COM.CO was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2025-11-21. Sector: Energy & Utilities. Country: Colombia. Website: INTEROIL.COM.CO.
Fueling Solutions Inc.
November 22, 2025
•[ ransomware, energy, government ]
Fueling Solutions Inc. was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-11-22. Sector: Energy & Utilities. Country: United States of America. Website: fueling-solutions.com. Fueling Solutions, Inc. specializes in providing commercial, industrial, and mission-critical fueling systems across over 30 countries on four continents. The company offers a range of services including sales, service, and installation for convenience store point-of-sale systems, fuel dispensers, and monitoring systems. They are also involved in complex industrial fueling systems and mission-critical environments such as data centers and government systems. Established in 1986, they have completed thousands of projects, catering to various sectors including convenience stores, bulk plants, and local government fueling systems.
Ecuacorriente S.A.
November 25, 2025
•[ ransomware, energy ]
Ecuacorriente S.A. was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Energy & Utilities. Country: Ecuador. Website: www.emis.com. https://ecsa.com.ec https://www.emis.com/php/company-profile/EC/Ecuacorriente_SA_en_3950413.html https://www.***.com/business-directory/company-profiles.ecuacorriente_sa.ef08074bdfb377fb12cd904184c089bc.html . Revenue - $1.11 billion USD. Ecuacorriente S.A is a mining company. It is operated by China Railway Construction Copper Crown Investment Co., Ltd. The company is involved in mining and has created over 2,400 direct jobs for the local area, as well as over 10,000 indirect jobs. Ecuacorriente S.A has a mineral processing capacity of 20 million tons per year and operates the Mirador Copper Mine, with an annual production of 354,000 tonnes of copper concentrate and 96,000 tons of copper. The company is also engaged in environmental governance and ecological recovery work.
Electricidad Panamericana
November 21, 2025
•[ ransomware, energy ]
Electricidad Panamericana was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2025-11-21. Sector: Energy & Utilities. Country: Argentina. Website: electricidadpanamericana.com.ar. Data size claimed by the group: 100GB.
EnQuest
October 21, 2025
•[ ransomware, energy, technology ]
EnQuest was listed as a victim on the leak site of the tridentlocker ransomware group; the attack is estimated to have taken place on 2025-10-21. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: enquest.com. [AI generated] EnQuest is a leading independent oil and gas production and development company with operations concentrated in the UK North Sea. The company specializes in extending the life and extracting maximum value from maturing and underdeveloped oil and gas fields. Its recognized for applying advanced technology and innovative techniques to enhance performance and increase value throughout its assets.
Refinadora Costarricense de Petróleo
November 27, 2024
•[ ransomware, energy, critical infrastructure ]
Refinadora Costarricense de Petrleo (RECOPE), the state-owned energy provider for Costa Rica is hit with a ransomware attack, requiring the company to shift to manual operations and call in help from abroad.
KazMunaiGas
May 5, 2025
•[ social, hack, phishing ]
A spear-phishing campaign disguised as internal HR communications delivered multi-stage malware to KMG employees. Attackers used a compromised business email, LNK downloader, PowerShell (DOWNSHELL), and DLL implant to establish reverse shell access. KMG later labeled it a phishing test.
Pakistan Petroleum Limited (PPL)
August 6, 2025
•[ ransomware, leak, malware ]
PPLs servers and backups were encrypted and disabled by Blue Locker ransomware; IT and financial operations were disrupted for days; a ransom note threatened data leaks; NCERT issued high alert advisory to national institutions
Acea
July 31, 2025
•[ ransomware, malware, energy ]
Italian utility company Acea suffered another ransomware attack, this time claimed by World Leaks. Systems were encrypted, disrupting operations, though the exact duration and number of affected customers were not disclosed.
Gazprom
January 28, 2025
•[ hack, ddos, energy ]
Ukrainian cyber experts have carried out a DDOS attack on the digital infrastructure of some of the largest Russian energy companies, Gazprom and Gazpromneft. Babel and a number of other media outlets report this , citing a source.
Lukoil
January 1, 2025
•[ hack, ddos, energy ]
Ukraines military intelligence agency (GUR) launched a coordinated DDoS attack against Russian oil giant Lukoil and digital infrastructure like Evotor and Chestny Znak, disrupting payment terminals and authentication systems nationwide. The politically motivated operation caused significant service outages during the New Year holiday, demonstrating Ukraine's expanding offensive cyber capabilities.
Yazoo Valley Electric Power Association
January 30, 2025
•[ ransomware, malware, energy ]
Yazoo Valley Electric Power Association, an electric utility serving multiple counties in Mississippi discloses to suffer an attack by cybercriminals last summer in an incident that exposed the information of more than 20,000 residents. The Akira ransomware gang claims responsibility for the attack.
Oil and gas facility control panels in the U.S.
January 31, 2025
•[ hack, energy ]
Researchers at Cyble identify Sector 16, a new pro-Russian hacktivist group targeting into oil and gas facility control panels in the U.S.
CenterPoint Energy
January 28, 2025
•[ leak, energy ]
CenterPoint Energy, a large Texas energy company confirms it is investigating reports of stolen customer data that has been published on a cybercriminal forum after it was allegedly taken during the 2023 MOVEit breach.