ONGC Petro Additions Limited Listed by World Leaks Ransomware Group

On May 19, 2025, the ransomware group worldleaks added ONGC Petro Additions Limited to its leak site, claiming that it had exfiltrated internal files from the Indian petrochemical company during a ransomware attack.

Reported Details of the Incident

ONGC Petro Additions Limited, known as OPaL, is a joint venture promoted by Oil and Natural Gas Corporation and co-promoted by Gujarat State Petroleum Corporation. The company operates one of the largest integrated petrochemical complexes in south Asia, located in Dahej, Gujarat, and produces HDPE, LLDPE, PP and other materials.

Public reporting indicates the attackers gained access to the company’s systems, encrypted data, and then exfiltrated internal files before listing the victim on their onion site. The exact number of files or specific data types remains unclear from available reporting, but the listing itself signals that sensitive internal documents are now in the group’s possession. No customer or employee records have been publicly described in the initial listing.

Why This Matters for You and Your Family

Even when a breach hits a large industrial company, the consequences often reach ordinary people. Internal files frequently contain vendor lists, employee directories, contractor contacts, or customer invoices that include personal details such as names, addresses, phone numbers, and email accounts. Once those records appear on dark-web leak sites, they become raw material for identity thieves, phishing campaigns, and harassment.