Suncor cyberattackers obtained Petro Points members' contact info
CALGARY - Suncor Energy Inc. says the cyberattack that affected the company's Petro-Canada retail chain also resulted in the leakage of some customer data.
The Calgary-based energy company says the cybercriminals accessed the company's Petro-Points rewards program and obtained members' basic contact information.
Suncor says it is notifying Petro-Points members and privacy regulators, and will inform affected parties if it is determined that any additional information was obtained.
The company continues to investigate the cyberattack, which it says occurred on or about June 21.
The safety and reliability of Suncor's oil and gas-producing field operations was unaffected.
Many Petro-Canada locations across the country were cash-only for several days last week due to the cybersecurity breach, and the company's Petro-Points app, website and some car washes were also temporarily unavailable.
Today, Suncor release the following statement:
As previously announced on June 25, 2023, Suncor experienced a cybersecurity incident. We immediately activated our business continuity plans, engaged leading IT and cybersecurity experts and notified relevant authorities. Based on our investigation to date, we determined that our IT network was accessed by an unauthorized party on or about June 21, 2023.
The incident has not impacted the safety and reliability of our field operations. However, our Petro-Canada business experienced temporary disruptions that have largely been resolved. Our focus throughout has been to protect our IT systems and minimize disruption to our customers and suppliers.
We have determined that our Petro-PointsTM program has been impacted. The unauthorized party obtained members' basic contact information. We are notifying Petro-Points members and the appropriate privacy regulators.
If we discover additional information was obtained, we will notify affected parties as appropriate.
- with files from Michelle Warren
