News - Middle East - Saudi Arabia: Hackers managed to get access to a large amount of data from Saudi oil giant Aramco, considering that the company seems to be unable to fully protect its digital infrastructure, an American Website has reported.

Oilprice website stated that Aramco data breach shows again the threat to energy supply comes not just from drone and missile attacks, but also from cyber attacks.

In parallel, BleepingComputer revealed that Saudi Aramco has suffered a data breach in which cyber attackers have stolen 1 terabyte of proprietary data of Saudi Arabia’s oil giant and are selling it on the dark web.

The threat group, identified as ZeroX, is offering for sale on the darknet the data it claims to have gained by hacking Aramco’s “network and its servers” at some point last year.

ZeroX and Aramco both told BleepingComputer this data breach was not ransomware or any other kind of an extortion attack.

The data up for sale at a starting negotiable price of $5 million includes documents pertaining to Saudi Aramco refineries, personal information about more than 14,000 employees, project specifications for systems, pricing sheets and internal analyses, as well as security-related information including IP addresses, Wi-Fi access points, and IoT devices, ZeroX told BleepingComputer.

The group claims it has been negotiating the sale of the data with five potentially interested buyers, ZeroX told BleepingComputer.

Saudi Aramco has been the victim of cybercrimes in the past, the most notorious being the 2012 Shamoon malware that was used in a crippling attack that wiped out every computer at the Saudi oil firm. In 2018, a variant of the Shamoon malware resurfaced, cybersecurity experts warned at the time.