Romania
ROU
Rompetrol ransomware interrupts Fill & Go fuel-payment service
During the night of 6-7 March 2022, a ransomware incident affected Rompetrol digital infrastructure. The company temporarily disabled its Fill & Go fleet and individual-customer payment service and websites, interrupting that transaction channel until restoration work progressed; alternative cash and ordinary bank-card payments remained available at petrol stations. Rompetrol explicitly said that petrol-station activity and Petromidia refinery operations were not halted. The separate May 2022 DDoS against Fill & Go Manager is not part of this incident.
73
Estimated severity
73 / 100
83
Source reliability
83 / 100
Approximate Date
2022-03-06
Targeted Company
ROMPETROL
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Romania
Affected countries
Romania
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service degradationService unavailability
Affected sectors
Energy & UtilitiesRetail
Affected departments
Customer ServiceInformation TechnologySales
Attack Profile
Attack types
Ransomware
Attributed threat actors
HIVE
Sources
Incident Sources
rompetrol.comhttps://www.rompetrol.com/mediaroom/press-releases/cyberattack-on-rompetrol-digital-infrastructure-id-1721-cmsid-471hotnews.rohttps://hotnews.ro/atacul-cibernetic-de-tip-ransomware-de-la-rompetrol-compania-anunta-ca-sistemele-it-au-fost-partial-restaurate-fara-a-spune-cu-ce-costuri-139686bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/rompetrol-gas-station-network-hit-by-hive-ransomware/