Rompetrol

Rompetrol, operating as The Rompetrol Group N.V. with headquarters in Romania, is a major petroleum provider engaged in the downstream sector of the oil and gas industry. The company's core activities encompass the refining of petroleum products and the retail distribution of fuel through a network of gas stations. A notable component of its consumer-facing services is the Fill&Go payment system, which facilitates transactions at its retail outlets. Its operational footprint includes a key refinery, positioning it as a significant player in the regional energy supply chain, though specific details regarding the full extent of its market reach or the precise scale of its assets are not provided in the available information. The company's structure as a naamloze vennootschap (N.V.) suggests a corporate form typical for larger enterprises, though explicit details about ownership or subsidiary relationships are not stated.

The company's reliance on information technology for critical customer services was starkly revealed during the ransomware attack it suffered on March 6, 2022, attributed to the Hive group. This incident resulted in the shutdown of its corporate websites and the disruption of its Fill&Go payment service, though its physical gas station operations continued by implementing alternative payment methods, demonstrating a degree of operational resilience. The attack compromised internal IT systems, including those at its key refinery, yet refinery operations themselves were not affected, indicating a separation between its digital administrative infrastructure and physical industrial control systems. In response to the attack, which involved a multi-million dollar ransom demand coupled with threats of data leakage, Rompetrol engaged with cybersecurity authorities for assistance. This action points to an established protocol for interacting with regulatory bodies during a significant cyber incident. The event underscores the company's position as a critical infrastructure provider within the petroleum sector, facing sophisticated cyber threats that target its digital transaction platforms while its core industrial processes remained secure. The available information does not specify the long-term business impact or the final resolution of the incident beyond the immediate disruption and the involvement of authorities.