Canadian Suncor Energy impacted by cyberattack and reflected at gas station operations

Suncor Energy, a major Canadian energy company and the parent company of Petro-Canada, reports it has experienced a cyberattack, resulting in technical problems that have impacted Petro-Canada gas stations. Customers have been unable to make credit card or reward points payments due to the incident.

The company has taken immediate measures to mitigate the effects of the cyberattack and has notified the appropriate authorities.

However, Suncor Energy anticipates that customer and supplier transactions will be negatively affected until the incident is fully resolved. There is currently no evidence of any compromise or misuse of customer, supplier, or employee data resulting from the cyberattack.

The company has not provided specific details regarding the nature of the cybersecurity incident, nor has it confirmed whether it was a ransomware attack that targeted its systems.

Petro-Canada's network of over 1,500 gas stations throughout Canada has experienced problems as a result of the cyberattack. Apart from not being able to pay with payment cards, customers have reported being unable to log in to their accounts through the app or website, preventing them from accessing various services and earning rewards points when refueling at Petro-Canada stations.

Update - on 6th of July Suncor Energy has confirmed that an unauthorized party breached its IT network around June 21. The disruptions at its Petro-Canada subsidiary, have largely been resolved.

Although the exact number of impacted customers was not disclosed, Suncor has stated that it will inform customers if any additional data was accessed as part of the breach.

In an email to customers, Petro-Canada said it believes the information was limited to customers' names and the information they "may have provided" since joining the program, specifically their mailing and email addresses, phone numbers and dates of birth.