Saudi Arabia
SAU
Saudi Aramco says supplier breach exposed company data; operations unaffected
In July 2021, Saudi Aramco confirmed company data was exposed via a third-party contractor attack after a threat actor advertised Aramco-related data for sale. Aramco stated its own systems were not breached and operations were unaffected, so no TRACE-qualifying operational impact is established.
35
Estimated severity
35 / 100
85
Source reliability
85 / 100
Approximate Date
21/07/2021
Targeted Company
SAUDI ARAMCO
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Saudi Arabia
Affected countries
Saudi Arabia
Impacted regions
Middle East · Saudi Arabia
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
No information
Affected sectors
Energy & Utilities
Affected departments
No information
Attack Profile
Attack types
Third-party or partner compromiseData breachData exfiltration
Attributed threat actors
ZEROX296