Suncor Energy Cyberattack Impacts Petro-Canada Gas Stations

Cyber Security Threat Summary:
Over the weekend, Suncor, one of Canada’s largest synthetic crude producers, disclosed it suffered from a cyberattack, stating that it is working on resolving the incident and that some transactions with customers and suppliers may have been impacted. Although no additional details were reported in Suncor’s notice, Petro-Canada, a subsidiary of Suncor that operates 1,500 gas stations across Canada, stated it is facing technical issues, preventing customers from paying with credit cards or rewards points. According to a post on Twitter, the company warned customers that they cannot currently log in to their accounts via the app or website and apologized for the inconvenience caused. This outage also prevents earning points when refueling at the company's gas stations.

Security Officer Comments:
As of writing, it is unclear what type of cyber attack was launched. According to Suncor Energy, it does not have any evidence to suggest that customer, supplier, or employee data was compromised or misused. The company is currently working with authorities to uncover the scope of the attack and resolve the technical issues.

Link(s):
https://www.bleepingcomputer.com/
https://www.theglobeandmail.com/