In May 2024, Nigeria’s Nestoil Group, a major player in the oil and gas sector, fell victim to a Blacksuit ransomware attack, raising alarms over potential disruptions to critical oil and infrastructure operations. The attack targeted the company’s digital systems, likely encrypting sensitive operational and corporate data while threatening to leak it unless a ransom was paid. Given Nestoil’s role in Nigeria’s energy sector where it provides engineering, procurement, and construction services for oil and gas projects the incident posed risks to supply chain stability, project timelines, and national energy security.The breach not only jeopardized internal data (e.g., employee records, proprietary project details) but also risked cascading effects on Nigeria’s broader infrastructure, including fuel distribution and refining operations. While the full scope of the data compromise remains undisclosed, the involvement of a sophisticated ransomware group like Blacksuit suggests high stakes, with potential financial losses from operational downtime, reputational damage, and regulatory penalties. The attack underscores the vulnerability of energy sector entities to cyber extortion, particularly in regions where digital defenses may lag behind evolving threats.
TPRM report: https://www.rankiteo.com/company/nestoilgroup
"id": "nes237092125",
"linkid": "nestoilgroup",
"type": "Ransomware",
"date": "5/2024",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"{'affected_entities': [{'industry': 'Oil and Infrastructure',
'location': 'Nigeria',
'name': 'Nestoil Group',
'type': 'Company'}],
'date_publicly_disclosed': '2024-05',
'description': 'In May 2024, Nigeria’s Nestoil Group was hit by the Blacksuit '
'ransomware group, sparking concerns over disruptions to oil '
'and infrastructure operations.',
'impact': {'operational_impact': 'Disruptions to oil and infrastructure '
'operations'},
'ransomware': {'ransomware_strain': 'Blacksuit'},
'threat_actor': 'Blacksuit ransomware group',
'title': 'Nestoil Group Ransomware Attack by Blacksuit',
'type': 'Ransomware Attack'}