The Impact of a Major Cyberattack on Petro-Canada’s Petro-Points Program: Updates and Concerns

2023-08-16 04:05:00

Petro‐Canada customers with a Petro‐Points account should be aware. More than 45 days after a major cyberattack, the company says “everything is back to normal, or almost,” but their cards still don’t work.

• Read also: “I can’t tolerate this”: a Quebecer wants to make Suncor pay for its “mismanagement” of a cyberattack of which it was the victim

“I did not know. You point it out to me,” many customers told the JournalTuesday, at four different service stations in the chain.

Again on Tuesday, August 15, here is what is written on the gas receipt at Petro-Canada. photo julien mcevoy

They all have in common that they are members of the Petro-Points loyalty program, which allows you to accumulate points when you make purchases, such as gasoline.

Since June 21, they have been unable to use their cards due to a cyberattack on the computer network of Suncor, the Canadian oil company that owns Petro-Canada.

“We have determined that an unauthorized party accessed our IT network on or about June 21, 2023, and that our Petro-Points program was impacted,” the company finally told customers by email. July 6.

In the same email, Suncor says it has disabled its Petro-Points systems as well as its app and website.

Since the cyberattack, Petro-Points members have been told to keep all their bills, as the system is still offline more than 45 days later.

“We will update your Petro-Points balance as soon as possible,” the receipt reads.

One of the four Petro-Canada gas stations visited by the Journal on Tuesday is located on rue Saint-Denis, in the borough of Rosemont–La Petite-Patrie. photo julien mcevoy

Finally an answer

The company did not respond to any of the many requests for clarification from the Journal since June 21.

Suncor CEO Rich Kruger spoke publicly about the cyberattack for the first time on Tuesday during the presentation of second-quarter financial results.

“The incident certainly caused disruption, but it did not have a significant impact on our financial and operating results,” he told shareholders.

Mr. Kruger added that “everything is now back to normal, with a few exceptions”, and that Suncor has “learned from the experience”.

This did not convince one of their clients, Esteben Harguindeguy.

“Our personal data was stolen, and they tell us that it cost them nothing? They laugh at us,” he says.

In its July 6 email, Suncor says it “believes” the hackers obtained “only” the name, email address, mailing address, phone number and date of birth of Petro members. -Points.

Mr. Harguindeguy also filed a class action suit against Suncor on July 7, because he suspects that the financial data and even the geolocation data of Petro-Points members could have been stolen by hackers.

Esteben Harguindeguy filed a class action petition against Suncor on July 7th. MARIO BEAUREGARD/QMI AGENCY

“They take us for cellars”

When Petro-Canada indicates that the Petro-Points balance of its customers will be updated “as soon as possible”, Esteben Harguindeguy is skeptical.

“They are not even able to tell us what happened with our personal data, and there, we would have to believe them? They really take us for cellars”, he is offended.

At Suncor, Tuesday, the hour was rather with accolades. “I want to relive a cyberattack as much as I want root canal treatment. But if I had to relive it, I would like to be surrounded by the same team, which reacted very well,” said CEO Rich Kruger.

1692178524
#Watch #points #card #PetroCanada

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.