Dark Web Spotlight: Saudi Aramco Data On the Dark Web

Hacker group ZeroX claims to have one terabyte worth of data from Saudi Aramco for purchase. The asking price? A mere five million dollars.  The data is reported to include documents from a number of Saudi Aramco refineries including Riyadh, Jeddah, and Yanbu. Also included in the leak is personally identifiable information (PII) for more than14,000 employees with details such as names, emails, phone numbers, and more.  The leak is said to be sourced from a third party, a contractor working for the state oil company. This leak comes on the heels of Saudi Aramco forming its Cybersecurity Compliance Certificate Program for its suppliers in 2020. This program was designed to minimize third-party data risk.  Digital risk protection tools such as Data Breach Prevention can assist in finding third-party leaks that cost your company. You can speak with our security experts anytime to assess your third-party risks.