Conpet says cyberattack disrupted corporate IT and took down website; Qilin claims responsibility and alleges ~1TB exfiltration. Conpet disclosed that a Tuesday cyberattack impacted its corporate IT infrastructure and knocked its public website offline, but said operational technologies—its SCADA and telecommunications systems—were not affected and crude oil/gasoline transport continued normally; the company reported working with national cybersecurity authorities to investigate and restore systems, and said it also notified prosecutors and filed a criminal complaint. While Conpet has not publicly detailed the attack type, Qilin added Conpet to its leak site and claims it stole nearly 1TB of documents, posting samples that reportedly include internal financial information and passport scans.

The focus here is that “OT not impacted” is encouraging but not a finish line: the critical question is whether IT-to-OT pivot paths are truly blocked in practice (credentials, remote admin tooling, jump hosts, directory trusts, routing), and whether defenders can detect and contain the full playbook—initial foothold, privilege escalation, data staging/exfiltration, and extortion—before adversaries can either pressure business leadership via leaks or attempt a second phase aimed at operational disruption.