East African Gasoil (EAGOL) listed by the Arcus Media ransomware group

Overview

The Arcus Media ransomware group has listed East African Gasoil (EAGOL), an independent oil and gas company operating in Kenya, on its leak site. The listing carries a deadline of 12 July 2026, indicating an active negotiation period.

What was published

The group claims to have copied data from the company's systems. Oil and gas operators hold operational records, contracts, financial documents and employee files, which are the likely contents of any exfiltration.

Risks for affected individuals

• Employees' personal records may be exposed.
• Operational and contract data could be sensitive.
• Financial information may enable fraud attempts.

What remains unknown

• The volume of data exfiltrated.
• Whether the deadline has passed and data released.
• The extent of the intrusion.

What affected people should do

Employees should update credentials and watch for phishing referencing the company. EAGOL should notify staff and partners, engage cybersecurity experts, and coordinate with Kenyan authorities on the response.