Saudi Aramco facing USD 50 million cyber extortion demand over leaked data

A page accessed by the media on the darknet claimed the extortionist held 1 terabyte worth of Aramco data.

Published: 21st July 2021 10:01 PM  |   Last Updated: 21st July 2021 10:01 PM   |  A+A-

The logo of Saudi Aramco is seen in Manama, Bahrain

The logo of Saudi Aramco is seen in Manama, Bahrain (Photo | Reuters)

By Associated Press

DUBAI: Saudi Arabia's state oil giant-acknowledged on Wednesday that leaked data from the company - files now apparently being used in a cyber-extortion attempt involving a USD 50 million ransom demand - likely came from one of its contractors.

The Saudi Arabian Oil Co., better known as Saudi Aramco, told The Associated Press that it "recently became aware of the indirect release of a limited amount of company data which was held by third-party contractors".

The oil firm did not say which contractor found itself affected nor whether that contractor had been hacked or if the information leaked out another way. "We confirm that the release of data was not due to a breach of our systems, has no impact on our operations and the company continues to maintain a robust cybersecurity posture," Aramco said.

A page accessed by the AP on the darknet - a part of the internet hosted within an encrypted network and accessible only through specialized anonymity-providing tools - claimed the extortionist held 1 terabyte worth of Aramco data.

A terabyte is 1,000 gigabytes. The page offered Aramco a chance to have the data deleted for USD 50 million in cryptocurrency, while another timer counted down from USD 5 million, likely in an effort to pressure the company.

It remains unclear who is behind the ransom plot. Aramco has been targeted before by a cyberattack. In 2012, the kingdom's oil giant found itself hit by the so-called Shamoon computer virus, which deleted hard drives and then displayed a picture of a burning American flag on computer screens.

The attack forced Aramco to shut down its network and destroy over 30,000 computers. US officials later blamed that attack on Iran, whose nuclear enrichment program had just been targeted by the Stuxnet virus, likely an American and Israeli creation.

In 2017, another virus swept across the kingdom and disrupted computers at Sadara, a joint venture between Aramco and Michigan-based Dow Chemical Co. Officials at the time warned it could be another version of Shamoon.

The sliver of Aramco that now trades publicly on Riyadh's Tadawul stock exchange stood at 34.90 riyals a share, or USD 9.30, after trading stopped last week for the Muslim holiday of Eid al-Adha. That puts the company's valuation at around USD 1.8 trillion, making it one of the world's most-valued companies.


Disclaimer : We respect your thoughts and views! But we need to be judicious while moderating your comments. All the comments will be moderated by the editorial. Abstain from posting comments that are obscene, defamatory or inflammatory, and do not indulge in personal attacks. Try to avoid outside hyperlinks inside the comment. Help us delete comments that do not follow these guidelines.

The views expressed in comments published on are those of the comment writers alone. They do not represent the views or opinions of or its staff, nor do they represent the views or opinions of The New Indian Express Group, or any entity of, or affiliated with, The New Indian Express Group. reserves the right to take any or all comments down at any time.

flipboard facebook twitter whatsapp