Threat Actor Claims Aramco Workforce Database Exposes 68,385 Records

Summary
A threat actor posted a database allegedly containing 68,385 Aramco workforce records, including national IDs, employee details and broker account numbers. The claimed source of the data and method of compromise remain unconfirmed.
Key points
- A threat actor published a database on a hacking forum, claiming it contains 68,385 rows of Aramco workforce data.
- The alleged data includes national identification and employee numbers, names, corporate email addresses, birthdates, citizenship or residency details, broker account numbers and hire dates.
- The post claims the data came directly from Aramco, but the article says the method of compromise is unconfirmed.
- The article recommends investigation, notification and account monitoring; it does not report that Aramco has confirmed the incident or taken those steps.
Article Details
- Victim Organization
- Saudi Arabian Oil Group (Aramco)
- Incident Type
- Alleged exposure of internal workforce data
- Data Types Exposed
- National Identification Numbers
- Employee Identification Numbers
- Full names
- Corporate email addresses
- Dates of birth
- Citizenship and residency status
- Broker account numbers
- Residential countries
- Hire dates
- Affected Records
- The threat actor claimed the database contains 68,385 rows.
- Operational Impact
- No operational disruption is reported. The article says affected employees may face heightened risk of identity theft, financial fraud, and privacy violations.
- Ransom Or Extortion
- None reported.
- Claim Status
- claimed
Industries
ChemicalsSaudi Arabian Oil Group (Aramco), the world’s largest integrated energy and chemicals company, has allegedly had thousands of sensitive employee records exposed.EnergySaudi Arabian Oil Group (Aramco), the world’s largest integrated energy and chemicals company, has allegedly had thousands of sensitive employee records exposed.
