Saudi Aramco Data Breach
NOTICE: If you are a current or former employee of Saudi Aramco and received a NOTICE OF DATA BREACH, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options.
In July 2021, Saudi Arabian Oil Company, better known as Saudi Aramco, became aware of a data breach that occurred sometime in 2020 and involved its employees and third-party contractors. An unknown “threat actor” gained access to Aramco’s network and servers and stole one terabyte of proprietary data.
In June 2021, a blueprint of stolen data was first posted on a data breach marketplace forum by an unknown party. A countdown timer of 662 hours, or about 28 days, was set by the unknown party, after which the sale and negotiations of the stolen data would begin for a starting price of $5 million.
WHAT INFORMATION IS INVOLVED?
Exposed data includes full information on 14,254 employees, including the following:
- Full names
- Photos
- Passports
- Emails
- Job title
- Phone numbers
- ID numbers
- Certificates
- Aramco ID numbers
- Family information
- Residence permit numbers (Iqama cards)
The stolen data also includes a list of Aramco’s clients, along with invoices and contracts.
This is not the first time the company has experienced a cybersecurity incident. In 2012, Saudi Aramco’s systems had 30,000 computer hard drives wiped in a prominent data breach.
Saudi Aramco is one of the largest public petroleum and natural gas companies in the world and employs over 66,000 people. The company brings in nearly $230 billion in total revenue annually.
NOTICE: If you are a current or former employee of Saudi Aramco and received a NOTICE OF DATA BREACH, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options.