In July 2024, Carigali Hess Operating Company, a Malaysian oil and gas operator, fell victim to a ransomware attack orchestrated by the Hunters group, a known cybercriminal syndicate. The breach targeted the company’s critical oil assets, posing a direct threat to operational continuity and energy infrastructure stability. While specific details on data exfiltration or financial losses remain undisclosed, the attack’s focus on oil production systems suggests severe operational disruptions, including potential halts in extraction, refining, or distribution processes. Given the strategic importance of oil assets to Malaysia’s economy and global energy markets, the incident carries implications beyond the company, risking supply chain instability and broader economic repercussions. The involvement of ransomware further amplifies risks, as threat actors typically demand substantial payments while leaving backdoors for future exploitation. The attack underscores vulnerabilities in the energy sector’s cybersecurity posture, particularly against state-affiliated or financially motivated hackers targeting high-value infrastructure.