Date: June 26, 2023
Companies Affected: Siemens Energy and its subsidiary, Petro-Canada
Industry Affected: Energy and Gas Stations
Attack Type: Data theft using ransomware Clop via a zero-day vulnerability in the MOVEit Transfer platform.
Impact: Siemens Energy confirmed data was stolen during the attack, but critical data was not compromised, and business operations were not affected. Petro-Canada experienced technical issues preventing customers from paying with credit cards or reward points at gas stations, and their app and website were impacted, causing inconvenience to customers.
Additional Impact: Other organizations, including Schneider Electric, also faced data breaches related to the same MOVEit Transfer attack.
Ongoing Impact: The Clop gang continues to publish new victims on their website and release stolen data daily, leading to widespread data breaches affecting millions of individuals and businesses.
Affected Organizations: Besides Siemens Energy and Petro-Canada, other victims include NYC Department of Education, citizens of Oregon and Louisiana, Missouri and Illinois state governments, Zellis, Ofcam, Nova Scotia government, American College of Physicians, and Extreme Networks.
This summary provides an overview of the cyber attack’s key details, its impact on the companies and industry involved, and the ongoing repercussions for other organizations affected by the same attack.

No responses yet