Cyber‑Related Disruption Forces Temporary Suspension of PDVSA Oil Cargo Deliveries

January 24, 2026

INCIDENT

Petróleos de Venezuela, S.A. (PDVSA) — the Venezuelan state‑owned oil company — experienced a cyberattack in mid‑December 2025 that disrupted its central administrative and operational systems, including systems used for coordinating oil cargo deliveries. The attack forced PDVSA to isolate its oilfields, refineries, ports and other facilities from its compromised central network to contain the incident. As a result, scheduled oil cargo deliveries and exports were suspended for several days, as terminal workers resorted to manual record‑keeping and contingency measures to avoid further operational stoppages.

By 17  December 2025, PDVSA reported that it had resumed loading and delivering crude and fuel cargoes at its terminals after the cyber‑related suspension and operational isolation. PDVSA said the company could restart operations by manually recording deliveries while maintaining isolation from compromised systems, and exports resumed despite ongoing geopolitical and logistical pressures.

Incident Date

December 15, 2025

Location

Venezuela

Estimated Cost

scheduled oil cargo deliveries and exports suspended for several days

Type of Malware

No Malware identified

Threat Source

No threat source identified