Saudi Aramco Data Breach

NOTICE: If you are a current or former employee of Saudi Aramco and received a NOTICE OF DATA BREACH, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options.

Saudi Aramco data breachIn July 2021, Saudi Arabian Oil Company, better known as Saudi Aramco, became aware of a data breach that occurred sometime in 2020 and involved its employees and third-party contractors. An unknown “threat actor” gained access to Aramco’s network and servers and stole one terabyte of proprietary data.

In June 2021, a blueprint of stolen data was first posted on a data breach marketplace forum by an unknown party. A countdown timer of 662 hours, or about 28 days, was set by the unknown party, after which the sale and negotiations of the stolen data would begin for a starting price of $5 million.

WHAT INFORMATION IS INVOLVED?

Exposed data includes full information on 14,254 employees, including the following:

  • Full names
  • Photos
  • Passports
  • Emails
  • Job title
  • Phone numbers
  • ID numbers
  • Certificates
  • Aramco ID numbers
  • Family information
  • Residence permit numbers (Iqama cards)

The stolen data also includes a list of Aramco’s clients, along with invoices and contracts.

This is not the first time the company has experienced a cybersecurity incident. In 2012, Saudi Aramco’s systems had 30,000 computer hard drives wiped in a prominent data breach.

Saudi Aramco is one of the largest public petroleum and natural gas companies in the world and employs over 66,000 people. The company brings in nearly $230 billion in total revenue annually.

NOTICE: If you are a current or former employee of Saudi Aramco and received a NOTICE OF DATA BREACH, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options.