Leak-site post naming NIMR Oil, captured by ThreatCluster

NIMR Oil

everest

Ransomware leak-site victim intelligence

Data size
233.59 GB
Files
83,375
Views
35,000
Posted
Aug 5, 2026
Countdown
The files will be published after the timer counts down. The company still has time to get in touch with us soon
Country
AE
Industry
Energy & Utilities

Summary

Written by ThreatCluster from file listing, victim profile, leak post, screenshot

Everest claims to have exfiltrated 233.59 GB from NIMR Oil Well Maintenance WLL (nimroil.com), comprising 83,375 files. The data categories claimed include HR and recruitment records, internal documentation and source code, Well data and related drawings, safety and permit documents, and financial and commercial records. The leak post states a countdown to publication and lists NIMR Oil Well Maintenance WLL as the victim.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Outlook

What was taken

[AI generated] NIMR Oil is an Omani oil and gas company operating primarily in the Sultanate of Oman. It specializes in the production, processing, and management of crude oil and natural gas resources. The company works within Oman's energy sector, often collaborating with the national oil infrastructure. NIMR is known for operating mature oilfields and applying enhanced recovery techniques to maximize output from established reserves.

Data categories
Equipment Certification / Calibration / NDT / COC / PRV / Pressure Test / Zone2JOB DATA & CHART / CSV / RAW / XLS / ONET / ZCZJob Program / Well Data / Well Schematic / Deviation / BHA / Rig Up LayoutFSR / Field Service Report / Job ReportJST / JSQE / SES & RO / TicketsHSE / JHA / PTW / TBT / PJI / Field Safety / NORM / FlaringChemical / Acid / Water Request / HClCT Life Report / CT String Info / Coil Data / Pressure-Pull TestWell Integrity / Well Killing / Plug / Squeeze / Abandonment / Injectivity / FIT / LOTCrew List / CV / Resume / Personnel Evaluation / Training / Access RecordsCommercial / Financial / Contract / Invoice / Ledger / Revenue / Trial Balance / IFRSEquipment List / Inventory / Lifting Plan / Asset RegisterBOP / PCE / High-Pressure Irons / Choke Manifold / Flowline DocumentationDrawings / Technical Manuals / Databooks / DWF / DWGPost Job Report / Post Job Equipment Report / Post Job Personnel EvaluationNCR / QAQC Dossiers / Lesson Learn / Non-Conformance RecordsArchives / ZIP / RAR / MSG / EML / OneNoteVisual Evidence / Photos / Videos / WhatsApp Images

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page 11 KB
Logo of CCA Bank featuring a purple octagonal design with the text "CCA Bank" and a tagline in French.
onion leak page 7.5 KB
Logo featuring a stylized letter "E" in red and a gray arrow pointing to the right.
onion leak page 6.8 KB
Logo featuring the text "GRUPO DT" and "DESGUACES TENERIFE," accompanied by a stylized car outline in orange.
onion leak page 19 KB
Logo of Capgemini featuring a blue stylized cloud shape above the word "Capgemini" with the tagline "Consulting. Technology. Outsourcing."
onion leak page 27 KB
Logo of Atlas Air Worldwide featuring the company name in blue with a yellow globe design above it.
onion leak page 6.7 KB
Logo of Ingersoll Rand featuring the letters "IR" in red with a circular design.
onion leak page 11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page 128 KB
onion leak page 11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page 1.4 KB