Mexico
MEX
PEMEX ransomware forces manual fuel billing; $4.9m demand
On 11/11/2019, PETROLEOS MEXICANOS was hit by a DoppelPaymer ransomware attack that disrupted enterprise IT, including billing and payment systems, forcing manual invoicing for fuel deliveries and limiting access to email and networks. Reports cited a 565 BTC (about $4.9m) demand and a 48‑hour extortion deadline. Pemex stated production, inventories, and fuel supply operated normally.
60
Estimated severity
60 / 100
91
Source reliability
91 / 100
Approximate Date
11/11/2019
Targeted Company
PETROLEOS MEXICANOS
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Mexico
Affected countries
Mexico
Impacted regions
National · Mexico
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
ERP or business system disruptionOperational disruptionOrder processing disruption
Affected sectors
Energy & Utilities
Affected departments
Information TechnologyFinance
Attack Profile
Attack types
RansomwareExtortion
Attributed threat actors
DOPPELPAYMER
Sources
Incident Sources
bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/mexicos-pemex-oil-suffers-ransomware-attack-49-million-demandedjpt.spe.orghttps://jpt.spe.org/pemex-suffers-cyberattack-hackers-demand-ransom-nearly-5-millionvoanews.comhttps://www.voanews.com/a/americas_hackers-demand-5-million-mexicos-pemex-cyberattack/6179300.htmlmexiconewsdaily.comhttps://mexiconewsdaily.com/news/hackers-demand-us-5-million-after-cyberattack