ENAP / Enap Sipetrol International Petroshahd · Breach

Aoqin ransomware group claims attack on ENAP's Egypt unit

Nov 03, 2026 · 1 min read

The Aoqin ransomware group listed Petroshahd, described as the Egypt branch of Enap Sipetrol International, the international arm of Chile's state oil company ENAP, on its leak site. The group has not disclosed the size or type of the claimed data; ENAP has not confirmed the incident and the claim is unverified. Partners of the Egypt operation should watch for ENAP-themed phishing and payment-change requests.

By HIFY Radar newsroom Updated 11/03/2026 10:23 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

The Aoqin ransomware group claims to have attacked Petroshahd, the Egypt branch of Enap Sipetrol International, the international arm of Chile's state oil company ENAP. The name appeared on the group's leak site. ENAP has not confirmed the incident and the claim is unverified.

Why it matters

If confirmed, a hit on a state energy company's overseas operation can expose joint-venture, contract and field data, according to the source. The group has not disclosed the size or type of the claimed data. The source also warns of follow-on phishing risk against partners of the Egypt operation.

What to do

Await an official statement from ENAP and verify channels with contacts in the Egypt operation. Partners should tighten verification of ENAP-themed emails and payment-change requests.

For the technical team

Affected: ENAP / Enap Sipetrol International Petroshahd, unidade egípcia da Enap Sipetrol International, braço de exploração e produção da ENAP, estatal de petróleo · Petroshahd, described as the Egypt branch of Enap Sipetrol International, the international exploration and production arm of ENAP.
Exploitation: Leak claim listed on the Aoqin group's leak site and reported by DailyDarkWeb. Unverified, with no public confirmation from ENAP.
Fix: No software to update
More details: The group has not disclosed the size or type of the claimed data. Per the source, ENAP is Chile's state-owned oil and gas company, founded in 1950 and headquartered in Las Condes. The source advises partners of the Egypt operation to watch for ENAP-themed phishing and payment-change requests.