Nile Petroleum Corporation (NILEPET) listed by the Krybit ransomware group

Overview

The Krybit ransomware group has listed Nile Petroleum Corporation (NILEPET), the state-owned national oil and gas company of the Republic of South Sudan, on its leak site. The listing was published on 23 July 2026.

What was published

The group claims to have exfiltrated corporate data from the national oil company. The archive is expected to include contracts, exploration and production records, financial documents and employee files. The group has not released the full dataset publicly at this stage.

Risks for affected individuals

• Employee personal data may be included in the leak.
• Commercial and production data could affect national revenue streams.
• Partners in the oil and gas sector may face targeted attacks using leaked contracts.

What remains unknown

• The total size of the exfiltrated archive.
• Whether the data has been sold or published.
• The extent of the intrusion into the corporation's network.

What affected people should do

Employees and contractors should update credentials and remain alert to phishing that references internal projects. The corporation should engage national cybersecurity authorities, review access to sensitive systems, and notify staff and partners about the exposure.