Gordon Freeman Calls for an Attack on Petróleos de Venezuela, S.A. (PDVSA)
On April 22, 2026, a threat actor known as GordonFreeman claimed to have leaked 10,000 records belonging to employees of the Venezuelan state-owned oil company PDVSA on the cybercrime forum darkforums.su. The compromised dataset reportedly includes email addresses, phone numbers, and identification numbers. The exact state-owned entity or the vulnerability exploited to access PDVSA’s data has not yet been specified.
Overview
Missing evidence
Impact details
10,000 Exposed records
Media outlets are reporting a claim by GordonFreeman regarding approximately 10,000 PDVSA employee records; no official confirmation has been found.
Classification & severity
- Category
- Information content security
- Subtype
- Leak of confidential information
- Confidence
- Medium
Severity assessment
High- Functional impact
- None
- Information impact
- Government-sensitive
- Affected scope
- Organization-wide
- Critical service
- Potential
- Public confidence
- Moderate
Media reports describe an allegation involving approximately 10,000 PDVSA employee records and metadata related to account recovery and security measures. No official confirmation has been found.
Timeline
Gordon Freeman named Petróleos de Venezuela, S.A. (PDVSA) as the alleged victim.