On April 29, 2024, Mellitah Oil & Gas and its affiliate Enigas Ly, part of the Eni electricity, oil, and gas operations, appeared on the RansomHub ransomware leak site. The listing states that attackers exfiltrated internal files during a ransomware incident and posted a 1 TB data sample. The company has not yet made the data public, and the leak-site entry does not specify which exact records were taken or how many individuals may be affected.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Mellitah Oil & Gas
Get alerted the next time Mellitah Oil & Gas files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Mellitah Oil & Gas’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Primary Disclosure Details
The RansomHub leak page, accessible via the onion link hosted on ransomware.live, lists Mellitah Oil & Gas / Enigas Ly as a victim. It reports 160 visits to the page so far, a claimed 1 TB of data exfiltrated, and marks the files as not yet published. No victim notification letter or regulatory filing has surfaced publicly, so the precise data types and number of affected records remain unknown. The disclosure indicates the breach stemmed from a ransomware attack that successfully extracted internal company files before any encryption or public release of the archive.
Why This Matters for You and Your Family
When an energy-sector company like Mellitah Oil & Gas suffers a breach, the ripple effects reach ordinary people. Employees, contractors, local suppliers, and residents in operating regions often have personal information stored in internal files. If your name, address, national ID number, banking details, or family contact information appears in those records, attackers now hold it. Even without an exact victim count, the 1 TB volume suggests a substantial cache of documents that could expose you or members of your household to fraud, phishing, or targeted scams. Energy firms routinely handle employee medical records, payroll data, and vendor contracts, any of which can be repurposed to impersonate you or pressure your family.
Doxxing and Identity-Chain Risks
Internal files from oil and gas operators frequently contain spreadsheets that link employee names to personal email addresses, phone numbers, home addresses, and sometimes spouse or dependent details. Once such data reaches a ransomware leak site, it becomes raw material for doxxing chains. Threat actors cross-reference the leaked records against other breaches, gaming platforms, and social-media handles. A single exposed work email can lead to compromise of personal accounts, which in turn reveal your children’s usernames on Roblox, Fortnite, or Steam. These gaming accounts often share the same password patterns or recovery phone numbers, allowing attackers to map an entire household’s digital footprint. The result is persistent harassment, SIM-swapping attempts, or identity theft that can stretch for years.