Romanian Oil Pipeline Operator Conpet Hit by Qilin Ransomware Attack Romania’s national oil pipeline operator, Conpet, confirmed a cyberattack on Tuesday that disrupted its corporate IT systems and took down its website. The company, which manages nearly 4,000 kilometers of pipelines transporting crude oil, gasoline, and other derivatives to refineries nationwide, stated that operational technologies including its SCADA and telecommunications systems remained unaffected, ensuring uninterrupted core operations. In a Wednesday press release, Conpet acknowledged the incident but assured that it had not impacted its ability to meet contractual obligations. The company is working with Romanian cybersecurity authorities to investigate and restore affected systems. It also filed a criminal complaint with the Directorate for Investigating Organized Crime and Terrorism (DIICOT). The Qilin ransomware gang has claimed responsibility, listing Conpet on its dark web leak site and alleging the theft of nearly 1TB of data, including financial documents and passport scans. The group, active since August 2022 under the "Agenda" Ransomware-as-a-Service (RaaS) model, has targeted nearly 400 victims, including major organizations like Nissan, Asahi, and Synnovis. This attack follows a recent surge in cyber incidents targeting Romanian critical infrastructure, including ransomware strikes on Romanian Waters, Oltenia Energy Complex, Electrica Group, and over 100 hospitals earlier this year. Conpet has not yet disclosed further details on the breach.