Skip to content
Data Breach Exposes Wood Group Employee Information

Data Breach Exposes Wood Group Employee Information

First seen 11 Oct 2026, 09:31 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 00:02 UTC
  • •Wood Group suffered a data breach exposing employee bank details and personal information.
  • •The breach was linked to the Russian e-crime group Graceful Spider exploiting an Oracle zero-day vulnerability.
  • •Affected employees were advised to monitor their financial accounts and change passwords.

In October 2025, a data breach at Wood Group resulted in the exposure of employees' names, bank details, and addresses. The breach was attributed to the Russian e-crime group Graceful Spider, which exploited an Oracle zero-day vulnerability. Affected employees received letters informing them of the breach and advising them to take precautions such as changing passwords and monitoring financial accounts. Wood Group stated that the incident was contained and there was no ongoing malicious activity. The company is providing support through Equifax for those impacted. CrowdStrike confirmed the attack affected multiple organizations globally, but Wood was not specifically targeted. The breach highlights the risks associated with software vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-10-01
Data breach occurred
Wood Group's employee data was compromised due to an Oracle zero-day vulnerability exploited by hackers.
Pressandjournal
2026-10-09
Breach disclosure to employees
Wood Group sent letters to current and former employees about the data breach and advised on security measures.
Pressandjournal

More articles in this cluster (2)

Following this threat?

Track Graceful Spider and Wood in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 4

Common questions

What information was exposed?
The breach exposed employees' names, bank account numbers, sort codes, and addresses.
What should affected employees do?
Affected employees should monitor their financial accounts for unusual activity and change their passwords.
Was the breach contained?
Yes, Wood Group stated that the incident was fully contained with no evidence of ongoing malicious activity.