Full Breakdown
Qilin Ransomware Attack Compromises Conpet's Data
2/14/2026, 6:16:55 AM
Overview of the Incident
Conpet S.A., Romania's national oil pipeline operator, has confirmed a data breach resulting from a ransomware attack attributed to the Qilin group. The attack, which occurred last week, led to the exfiltration of nearly 1 terabyte of internal documents from Conpet's IT infrastructure. While the company has stated that its operational systems and pipeline activities remain unaffected, the breach raises significant concerns regarding the security of sensitive information.
Details of the Data Compromise
The Qilin ransomware group has claimed responsibility for the attack and has published sample files to substantiate its claims. The leaked documents reportedly include internal communications and files marked as confidential, with some dated as recently as November 2025. Among the compromised data are personal and financial details, such as names, personal identification numbers, postal addresses, and bank account numbers. Conpet has issued a warning regarding the potential misuse of this stolen data, advising individuals to remain vigilant against suspicious communications.
Official Statements & Responses
Conpet has confirmed the breach and is currently cooperating with the Romanian National Cyber Security Directorate as part of an ongoing investigation. The company emphasized that, despite the data theft, its operational capabilities have not been compromised. In its advisory, Conpet urged the public to be cautious of any unsolicited messages or requests that may arise as a result of the data leak.
Criticism & Opposition
While Conpet has taken steps to address the situation, critics have raised concerns about the adequacy of the company's cybersecurity measures prior to the attack. The incident has sparked discussions about the broader implications for national infrastructure security in Romania, particularly in the oil and gas sector, which is vital to the country's economy.
Conflicting Reports & Gaps
As the investigation continues, there are gaps in the available information regarding the full extent of the data compromised and the specific vulnerabilities that allowed the breach to occur. The lack of detailed reports on the nature of the stolen data and the timeline of the attack has left some stakeholders seeking clarity on the incident's implications.
Verbatim Quotes
- “Conpet warned that the stolen data could be misused and advised people to be cautious of suspicious messages or requests made through emails, phone calls, or other communication channels.” — Conpet S.A.
