PPL responds swiftly to ransomware attack

August 08, 2025 (MLN): Pakistan Petroleum Limited (PSX: PPL), one of the country’s leading energy firms, has confirmed a cybersecurity breach involving a ransomware attack that targeted segments of its IT infrastructure. 

The incident, detected on August 6, prompted an immediate and coordinated response from internal teams and external cybersecurity experts.

According to an official statement submitted to the Pakistan Stock Exchange (PSX), PPL identified the intrusion and activated its internal cybersecurity protocols without delay. 

The company temporarily suspended selected non-critical IT services as a precautionary measure to contain the threat and safeguard system integrity.

PPL operates a multi-layered cybersecurity framework, and thanks to these systems, the threat was rapidly isolated. 

There is no indication of business-critical or sensitive data being compromised. 

Core operational systems remain unaffected, without any disruption, the company stated. 

PPL clarified that a ransomware note was received from an external actor, but no contact was made with the hackers. 

In compliance with legal obligations, the matter has been reported to law enforcement and regulatory authorities, including the Securities and Exchange Commission of Pakistan (SECP). 

Investigations are currently underway in coordination with these agencies.

To ensure secure financial operations during the system scan, PPL opted for manual processing of transactions, deliberately avoiding the use of its digital systems.

The company is conducting a comprehensive forensic analysis to strengthen its cyber defenses and prevent future incidents. 

IT teams have been working diligently to restore full system functionality in a phased and secure manner.

“PPL attaches the highest priority to safeguarding its digital infrastructure and remains focused on maintaining the trust of its stakeholders through timely action and proactive cyber risk management,” said Ali Jaffar, Company Secretary.

PPL also addressed inaccuracies circulating on social media regarding the incident, emphasizing that core operational systems were not disrupted and that the situation is under control.

Copyright Mettis Link News