Suncor Energy, a prominent Canadian energy provider, is actively investigating a cybersecurity incident that has disrupted transactions at gas stations across Canada. The company disclosed the incident in a statement, acknowledging impacts on customer and supplier transactions. While third-party forensic experts have been retained and authorities notified, Suncor assures that there is no evidence of compromised customer or supplier data.
Despite the disruption, Suncor has largely resolved disruptions at its Petro-Canada subsidiary, which operates over 1,500 retail gas stations. However, hackers gained access to basic information of Petro-Points members, prompting the company to notify affected individuals and privacy regulators accordingly. Suncor emphasizes its commitment to customer security and privacy, pledging to notify customers promptly if additional data breaches are discovered.
The cybersecurity incident at Suncor coincides with warnings from Canadian authorities regarding potential cyber threats against the oil and gas sector. State-linked threat actors are suspected of targeting the industry, possibly in response to Canada’s support for Ukraine. While the incident raises concerns reminiscent of the 2021 Colonial Pipeline ransomware attack, Suncor clarifies that there’s no immediate impact on fuel supply and no evidence of ransom demands or mass data exfiltration. However, the company remains vigilant, underscoring the ongoing risk of cyber threats in the energy sector.
