Indonesia’s state-owned oil and gas corporation, **PT Pertamina**, fell victim to a **Killsecurity ransomware attack** in December 2024, severely compromising its critical energy infrastructure. The breach targeted vital operational systems, posing a direct threat to the nation’s fuel supply chain, refining capabilities, and energy security. While the full extent of data exfiltration remains undisclosed, the attack disrupted core functions, risking prolonged outages in oil production, distribution, and downstream services. Given Pertamina’s role as Indonesia’s largest energy provider—supplying over **60% of the country’s fuel needs**—the incident carried implications beyond corporate losses, potentially destabilizing regional energy markets and public services. The involvement of ransomware further amplified risks, as threat actors likely demanded payment to restore encrypted systems, exacerbating financial and operational strain. The attack underscored vulnerabilities in national critical infrastructure, raising concerns about cascading effects on economic stability and geopolitical energy dependencies.
Source: https://www.redpacketsecurity.com/killsec-ransomware-victim-pt-pertamina/
TPRM report: https://www.rankiteo.com/company/pertamina
"id": "per536092125",
"linkid": "pertamina",
"type": "Ransomware",
"date": "12/2024",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"{'affected_entities': [{'industry': 'energy',
'location': 'Indonesia',
'name': 'PT Pertamina',
'type': 'national oil company'}],
'date_detected': '2024-12',
'description': 'Indonesia’s national oil firm PT Pertamina was compromised by '
'Killsecurity ransomware in December 2024, endangering vital '
'energy infrastructure.',
'impact': {'systems_affected': ['vital energy infrastructure']},
'ransomware': {'ransomware_strain': 'Killsecurity'},
'threat_actor': 'Killsecurity',
'title': 'PT Pertamina Ransomware Attack by Killsecurity',
'type': 'ransomware'}