Russian oil giant LUKOIL hit by major cyberattack, system shut down across all branches

Russian oil company LUKOIL has been hit by a large-scale cyberattack, with its entire system shut down since the morning.

According to reports from the Telegram channel SHOT, citing sources within the company, this disruption has left LUKOIL employees unable to log into their work computers, halting normal operations, per Caliber.Az.

The attack has led to the company implementing strict measures to protect its data. Employees were prohibited from accessing their work accounts using their usual login credentials to prevent potential data leakage. In addition, access to both client systems and the company’s internal databases was blocked.

Both LUKOIL's head office and regional branches have been affected by the cyberattack. The company has not yet provided a timeline for the system’s recovery. However, employees who had already managed to log into the system were instructed to log out immediately as a precautionary measure.

The situation has also caused major disruptions at LUKOIL’s Moscow offices located on Sretensky Boulevard, Yakimanka, and Pokrovsky Boulevard. Employees have reported that they are unable to use electronic passes to access the offices, with security guards having to manually verify credentials before allowing entry.

In addition, customers at LUKOIL gas stations are experiencing issues, as they are unable to pay for fuel using cards due to the system outage.

LUKOIL is one of Russia’s largest oil companies and the second-largest oil producer in the country. Its headquarters are located in Moscow on Sretensky Boulevard.

This incident follows a recent DDoS attack on home internet provider Lovit, which resulted in widespread disruption for millions of residents in Moscow and St. Petersburg. Roskomnadzor later confirmed that the Lovit attack was mainly carried out from foreign locations, including the United States, Germany, and Sweden.

Last year, Russia witnessed a threefold increase in cyberattacks involving stolen accounts, affecting both large corporations and individual users.

By Tamilla Hasanova