Leak of confidential information

Guacamaya Leaks ~133 GB of Emails from Venezuelan Oil Company Oryx Resources as Part of 'ExtractivistLeaks'

As part of the “ExtractivistLeaks” release (~2 TB in total, published via Enlace Hacktivista and Distributed Denial of Secrets on August 3, 2022), the hacktivist collective Guacamaya leaked approximately 133 GB of emails (more than 170,000 messages) from Oryx Resources, a Venezuelan oil company linked to sanctioned businessman Samark López. The communications documented an undisclosed oil spill of about 175,000 liters that occurred in April 2022. Oryx was the only Venezuelan entity included in the leak.

Impact details

170,000 Exposed records

Guacamaya/DDoSecrets has released approximately 133 GB of hacked emails from Oryx Resources. DDoSecrets and CyberScoop have verified the dataset, which includes emails dated as recently as May 3, 2022, and references to an unreported oil spill.

corporate emailinternal communicationsfinancial documentsenvironmental incident records

Classification & severity

Category
Information content security
Subtype
Leak of confidential information
Confidence
High

Severity assessment

High
Functional impact
None
Information impact
Proprietary data
Affected scope
Organization-wide
Critical service
None
Public confidence
Moderate
Recoverability
Not recoverable

A large-scale leak of corporate emails from a private oil company has been confirmed; there is no public evidence of service disruption.

Data exfiltration· Confirmed Confidentiality

Timeline

Other

According to the leaked emails, an undisclosed oil spill of approximately 175,000 liters occurred in connection with Oryx Resources.

Publication

Guacamaya released "ExtractivistLeaks" (~2 TB) via Enlace Hacktivista and Distributed Denial of Secrets, including ~133 GB / more than 170,000 emails from Oryx Resources, the only Venezuelan entity included in the data dump.

Evidence & sources

2 sources