Almutawa, Tanmia, and Bin Omairah have allegedly been compromised in a data breach, with 15GB of sensitive corporate, infrastructure, and personnel data posted for sale on a hacker forum for $40,000. The anonymous seller originally listed data from all three Aramco contracting companies but noted that one organization’s data was subsequently removed following a negotiated agreement. The list of alleged victims includes:
-
Almutawa (🇸🇦): A Saudi Arabian general contracting, manufacturing, and services group.
-
Tanmia (🇸🇦): A Saudi Arabian contracting and engineering company.
-
Bin Omairah (🇸🇦): A Saudi Arabian multi-utility infrastructure solutions and contracting company.
The allegedly compromised data includes:
-
All information of personnel and hired engineers, including resumes, photos, ID cards, emails, phone numbers, residential addresses, and work records
-
Data maps of infrastructure projects, oil, gas, and power transmission, including all maps of Aramco power projects
-
Confidential agreements, contracts, invoices, and administrative documents
-
Mapping and SCADA systems information, including types of systems utilized
-
Academic research in the oil industry
-
Information on Saudi projects for urban development and power transmission, including maps of all Saudi power lines to buyer countries
