Organisation

Saudi Aramco

organisation:saudi_aramco Also: Aramco

Global oil and natural gas producer whose corporate IT environment was extensively disrupted by the 2012 attack.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
incoming COMPROMISES Saudi Aramco cyber-attack (2012) Explicit 30
incoming TARGETS Shamoon Explicit 30
incoming TARGETS Shamoon Attacks 2 and 3 Explicit 30
incoming MEMBER_OF Chris Kubecka Explicit 30

Claims

Saudi Aramco cyber-attack (2012) COMPROMISES Saudi Aramco

The 2012 attack struck Saudi Aramco and gave the attackers administrative access to its network.

Explicit Confidence 99% · Jack Rhysider EP 30 Details

“Saudi Aramco. You may not ever have heard of Saudi Aramco before and neither did I until I started researching this story and that’s because they don’t sell to consumers. Instead they sell to manufacturers and distributors so what do they do? Saudi Aramco is one of the largest oil and natural gas producers in the world. It controls massive amounts of oil reserves. It drills it and ships it all over the world. Saudi Aramco may be the most profitable company in existence and produces 25% of the global oil. It’s not a publically trading company though, so we really don’t know how much it’s worth. Because Saudi Aramco is huge and operating globally, it has a lot of computers. There are pump stations, plants, shipping terminals, logistics centers, laboratories, research and development centers, and storage facilities. Let’s not forget the teams it takes to run it. There’s an HR department, IT department, marketing, truck drivers, mechanics, engineers, public relations, finance, drilling teams, and advisors. Add all that up and Saudi Aramco has over 50,000 employees. Imagine how many computers there are at a company that has 50,000 employees. Not only do a lot of them have individual computers to work on but there’s a lot of servers; domain controllers, e-mail servers, SharePoint systems, files servers, and more. In 2012 Saudi Aramco had over 40,000 computers in their network worldwide. Now I say 2012 because that was when the most profitable company in the world was hit with the most devastating cyber-attack any company has ever seen.”

Jack Rhysider · offsets 1327–2897

Shamoon TARGETS Saudi Aramco

Shamoon targeted Saudi Aramco's computer systems, wiping approximately 35,000 of them.

Explicit Confidence 98% · Jack Rhysider EP 30 Details

“35,000 computers had become completely unusable all at the same time.”

Jack Rhysider · offsets 9832–9901

Shamoon Attacks 2 and 3 TARGETS Saudi Aramco

Shamoon Attacks 2 and 3 were described as ongoing against Saudi Aramco.

Explicit Confidence 97% · Chris Kubecka EP 30 Details

“There’s now Shamoon Attacks 2 and 3 that are still ongoing against Saudi Aramco”

Chris Kubecka · offsets 32521–32600

Chris Kubecka MEMBER_OF Saudi Aramco

Chris Kubecka accepted a role with Saudi Aramco after it called and hired her to ramp up its security.

Explicit Confidence 94% · Jack Rhysider EP 30 Details

“Chris took the job and got right to work building her team.”