Summary
Written by ThreatClusterfrom file listing, victim profile, leak post, screenshotEverest claims to have exfiltrated 233.59 GB from NIMR Oil Well Maintenance WLL (nimroil.com), comprising 83,375 files. The data categories claimed include HR and recruitment records, internal documentation and source code, Well data and related drawings, safety and permit documents, and financial and commercial records. The leak post states a countdown to publication and lists NIMR Oil Well Maintenance WLL as the victim.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- Outlook
What was taken
NIMR Oil Well Maintenance WLL
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us soon
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- dataset_description
- The dataset contains a 47.5 GB Outlook email archive of an NIMR Oil employee, including operational, technical, commercial, HSE, equipment, procurement and customer communications.
- Companies and organizations impacted by exposure
- NIMR Oil Well Maintenance WLL, QatarEnergy, North Oil Company (NOC), SLB (Schlumberger), Halliburton, Baker Hughes, NOV (National Oilwell Varco), QatarEnergy LNG...
- The dataset contains a 47.5 GB Outlook email archive of an NIMR Oil employee, in
- present
- The files will be published after the timer counts down. The company still has t
- listed
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.