Suncor (NYSE:SU) took immediate action after a cybersecurity breach disrupted Petro-Canada gas station operations, prompting the replacement of employee computers.

In response to the incident, the Calgary-based company has implemented a series of security measures to safeguard its systems and mitigate future risks.

Computer Replacement and Enhanced Security Measures

According to an internal communication dated July 3 obtained by CBC News, Suncor (NYSE:SU) has decided to replace both desktop and laptop computers in phases to ensure the safety of its devices. The process will begin with a small number of employees and contractors whose roles are deemed critical to business operations. While the extent of the computer recall remains undisclosed, cybersecurity expert Chester Wisniewski from Sophos, an international cybersecurity firm, suggests that a comprehensive replacement could indicate a severe situation.

Alongside the computer replacement, Suncor has issued directives to its employees, prohibiting the use of social media on company devices and emphasizing the importance of preventing unauthorized access to facilities, such as discouraging tailgating in elevators.

Petro-Canada Payment Problems Continue

The cause of the attack that disrupted debit and credit transactions at Petro-Canada gas stations nationwide and impacted access to the Petro-Points loyalty program remains undisclosed by Suncor (NYSE:SU).

Customers have taken to Twitter to express ongoing frustrations with the Petro-Points app, although the company assures them that efforts are underway to resolve the issues. Early estimates from the Canadian Internet Registration Authority suggest that the incident could cost the company millions of dollars.

Financial and Operational Impacts

The direct financial impact of the outage includes lost sales during the peak of the disruption at gas stations. However, other repercussions may not be immediately apparent. Geoffrey Cann, an energy industry consultant, highlights potential challenges such as reputational damage caused by the loyalty program disruption and operational hurdles related to the storage and sale of oil during the outage. Ongoing IT problems may also affect productivity, necessitating an interruption in the day-to-day activities of the workforce until the old systems are replaced.

Cybersecurity Concerns in the Energy Sector

The Suncor incident serves as a wake-up call for the broader oil and gas industry, prompting a reassessment of IT systems. Statistics Canada survey data from 2019 indicates that the oil and gas sector reported the highest number of cyber incidents among all infrastructure sectors. The Canadian Centre for Cyber Security report, released just before the Suncor incident, revealed the increasing prevalence of cyber threats in the industry. Deb Yedlin, CEO of the Calgary Chamber of Commerce, anticipates that cybersecurity will become a significant focus during quarterly earnings calls for oil and gas companies, similar to the rise of environmental, social, and governance reporting.

Growing Cybersecurity Threats

High-profile cybersecurity incidents are becoming more frequent across both public and private sectors. Attacks on various targets, such as Indigo, Empire Foods, and the Nova Scotia government, have disrupted transactions and exposed personal information. The oil and gas sector faces ransomware attacks as the primary threat to the country’s oil and gas supply.

The Canadian Centre for Cyber Security report also suggests that state-sponsored cyber espionage targeting the industry for economic reasons is a significant concern. Industry experts, including Tim McMillan, former president of the Canadian Association of Petroleum Producers, emphasize the need for robust security measures to protect against cyber threats.

Preparing for the Inevitable

Given the ongoing conflict between Russia and Ukraine, there is a rising possibility of critical infrastructure-targeted attacks escalating and circulating on the dark web. Even non-hostile players, such as Canada, could become victims. Industry experts stress the urgency of preparedness and the implementation of comprehensive security measures to mitigate the growing cybersecurity threats faced by the oil and gas sector.

Featured Image: Freepik

Please See Disclaimer