Calgary-based Suncor Energy is the latest oil company to report experiencing a cyber security incident. Suncor has already informed the proper authorities and is collaborating with third-party experts to investigate and resolve the situation.
According to a report by Calgaryherald.com, the company has not provided any further details about the type of attack or which parts of its operations have been affected. However, over the weekend, social media users complained about difficulties using credit or debit cards at the company’s Petro-Canada gas stations, as well as accessing car wash services.
Ian L. Paterson, CEO of Vancouver-based cybersecurity company Plurilock Security Inc., has stated that as early as Friday, Suncor employees were unable to log into their own internal accounts. Paterson mentions that this incident might not be a minor data breach, considering the various issues reported.
“All of these things put together seem to suggest that there could be a sizable cyber incident that’s taking place,” said Paterson. He further added, “I think that this actually could be the Canadian Colonial Pipeline, just in the sense that Suncor is such a large part of the economy.”
In 2021, the Colonial Pipeline, the largest pipeline system for refined oil products in the U.S., was targeted by a ransomware attack. This incident forced the company to temporarily halt pipeline operations, making it the largest cyberattack on oil infrastructure in the history of the United States. Canada, on the other hand, hasn’t experienced a large-scale successful cyberattack on a domestic oil and gas company, although experts have continually warned about the vulnerabilities in the energy industry.
“This has the potential to be very, very serious for Suncor, and it’s not really a surprise,” cautioned Paterson. “The cybersecurity industry as a whole, and certainly governments both at the federal level and others, have been sounding the alarm for many years that critical infrastructure, in particular, is vulnerable.”
Suncor has clarified that there is no evidence of any compromise or misuse of customer, supplier, or employee data. They have also stated that there is no indication of any impact on critical infrastructure such as oilsands facilities or refineries. However, the company mentioned that some transactions with customers and suppliers may be affected during their ongoing efforts to resolve the situation. They have promptly notified the appropriate authorities about the incident.
Customers visiting Petro-Canada gas stations in Calgary and Ontario have been facing issues with credit or debit card transactions. The stations have switched to cash-only transactions temporarily. The company has also reported that customers are unable to log into their Petro-Canada loyalty program accounts.
Paterson emphasized that the resolution of this incident might take a while due to the complexity of Suncor’s operations. He mentioned, “If the threat actor has been present and persistent for a long time, it could take a very long time to root them out.”
As the investigation continues, it is essential for companies, particularly in critical industries like energy, to prioritize cybersecurity and protect themselves from potential cyber threats.
Credit: calgaryherald.com
ENND
