Shell Reveals Cybersecurity Incidents Related To MOVEIT Attacks"

Shell Plc has identified cybersecurity incidents on its network. (photo: dock. pexels)

Shell Plc announced on Friday September 15 that it had identified cybersecurity incidents involving several employees working with the company's BG Group unit in Australia prior to the merger. They became the latest victims of the MOVEIT attack.

A number of businesses around the world have recently been affected by cyberattacks on MOVEit software that are usually used to transfer large amounts of data that are often sensitive, including pension information and social insurance numbers.

Shell said it had identified some personal information related to affected individuals accessed without permission and had sought to inform them of the breach.

"The data comes from 2013 and although it is historical data and some of it may have expired, there are risks for individuals affected by identity theft and become targets of phishing campaigns," Shell said in a statement.

Shell did not immediately respond to Reuters' request to provide clarification on the exact number of individuals affected in the cybersecurity incident.

This development is the latest in a series of security breach incidents that have occurred in companies in Australia since late last year, resulting in the government reforming cybersecurity rules. They even formed an agency to oversee government investment in the field.

Hebe Chen, an analyst with IG Markets, told Reuters that the incident once again highlighted one of the weak points in the Australian company's ecosystem.

"Not only does it expose the fragile measures that already exist, but it also raises questions about the effectiveness of the Australian government's national cybersecurity strategy," Chen added.

The company completed its $70 billion acquisition of BG Group Plc in 2016, which brought into its portfolio a number of oil and gas projects in various countries, including Brazil and Australia.