Pan Gulf Holding Faces Major Ransomware Threat by Sarcoma
Ransomware Attack on Pan Gulf Holding by Sarcoma Group
Pan Gulf Holding, a prominent industrial and investment entity in Saudi Arabia, has allegedly been targeted by a ransomware attack attributed to the Sarcoma group. This breach, identified on December 9, reportedly involves the extraction of 113 GB of critical data, including SQL databases, posing a substantial risk to the company's operations and standing.
About Pan Gulf Holding
Established in 1978, Pan Gulf Holding has carved out a significant niche in the manufacturing sector, primarily catering to the oil and construction industries. The company operates through a network of subsidiaries, focusing on steel, piping, welding, fabrication, food, consulting, technology, automotive, inspection, and testing services. With a workforce ranging from 1,000 to 5,000 employees and a reported revenue of $387 million, Pan Gulf Holding serves major clients such as Saudi ARAMCO and SABIC Industries. Its dedication to quality and innovation has solidified its reputation in the Middle East.
Attack Overview
The Sarcoma ransomware group claims responsibility for exfiltrating a significant archive of files from Pan Gulf Holding, with threats to release the data publicly within a week. This incident underscores potential weaknesses in the company's cybersecurity framework, which may have been exploited by the attackers to access sensitive information. The possible exposure of such a large volume of data highlights the severe risk to Pan Gulf Holding's operations and client confidence.
About Sarcoma Ransomware Group
Sarcoma is a relatively new yet aggressive ransomware group that surfaced in October 2024. Notorious for its double extortion strategies, the group encrypts victims' data and threatens to leak it if ransom demands are unmet. Sarcoma has targeted various sectors worldwide, including healthcare, manufacturing, and finance. The group is known for targeting supply chains and employing advanced encryption methods, complicating data recovery without paying the ransom.
Potential Penetration Methods
Although specific details of Sarcoma's penetration into Pan Gulf Holding's systems remain undisclosed, the group is known for exploiting supply chain vulnerabilities and using lateral movement techniques to escalate privileges within networks. This strategy enables them to compromise additional devices and extract sensitive data before deploying encryption malware.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!