Cybersecurity experts warned about a new vulnerability at Pemex, affecting its electronic invoicing system and exposing customers“ personal data. This incident adds to the company's previous security challenges, most notably a ransomware attack in 2019 that demanded a ransom of 568 bitcoins, about $4.9 million. Repeat breaches, including an employee data leak in 2022, underscore the critical need to improve Pemex's defenses. Despite initial doubts about the authenticity of the leaked information, Pemex promised to investigate thoroughly, although no concrete post-incident actions have yet been detailed. The lack of software updates, due to resource constraints, has been identified as an underlying cause of these security problems.
https://oilandgasmagazine.com.mx/2024/02/pemex-enfrenta-nueva-filtracion-de-datos-por-hackeo/