Suncor Company Cyber Security Posture

suncor.com

In 1967, we pioneered commercial development of Canada's oil sands โ€“ one of the largest petroleum resource basins in the world. Since then, Suncor has grown to become a globally competitive integrated energy company with a balanced portfolio of high-quality assets, a strong balance sheet and significant growth prospects. Suncorโ€™s operations include oil sands development and upgrading, conventional and offshore oil and gas production, petroleum refining, and product marketing under the Petro-Canada brand. Our use of innovative technology has made us an industry leader in the energy business โ€“ and with a strong strategy for growth, Suncor offers a solid foundation for you to continue building your career. As an employer, Suncor is one of the best companies in Canada, providing tremendous future potential where talented people thrive and lead. As our business evolves, so do our employment opportunities. Our work culture includes a dynamic mix of newcomers and experienced professionals, with a diversity of skills and expertise from all parts of Canada.

Suncor Company Details

Linkedin ID:

suncor

Employees number:

14321 employees

Number of followers:

403819.0

NAICS:

211

Industry Type:

Oil and Gas

Homepage:

suncor.com

IP Addresses:

Scan still pending

Company ID:

SUN_7206037

Scan Status:

In-progress

AI scoreSuncor Risk Score (AI oriented)

Between 800 and 900

This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.

globalscoreSuncor Global Score
blurone
Ailogo

Suncor Company Scoring based on AI Models

Model NameDateDescriptionCurrent Score DifferenceScore
AVERAGE-Industry03-12-2025

This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers.

N/A

Between 800 and 900

Suncor Company Cyber Security News & History

Past Incidents
3
Attack Types
2
EntityTypeSeverityImpactSeenUrl IDDetailsView
SuncorCyber Attack60206/2023SUN23169723Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: A cyberattack, according to the Canadian energy corporation Suncor, was to blame for the widespread disruptions that shut down services over the weekend. The business has alerted the necessary authorities and is taking action while collaborating with outside experts to investigate and fix the matter. Problems were reported in Calgary, Ottawa, Toronto, and several other significant Canadian cities. Petro-Canada finally turned to Twitter to recognise the problems and to state that they were being fixed.

Petro-CanadaCyber Attack60206/2023PET01310723Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: A cyberattack, according to the Canadian energy corporation Suncor, was to blame for the widespread disruptions that shut down services over the weekend. The business has alerted the necessary authorities and is taking action while collaborating with outside experts to investigate and fix the matter. Problems were reported in Calgary, Ottawa, Toronto, and several other significant Canadian cities. Petro-Canada finally turned to Twitter to recognize the problems and to state that they were being fixed.

SuncorData Leak50106/2023SUN41914823Link
Rankiteo Explanation :
Attack without any consequences

Description: A cyber security incident has happened to Suncor, the business has contacted the necessary authorities and is taking action by consulting with outside specialists to look into and remedy the matter. They do not currently know of any proof that customer, supplier, or employee data has been hacked or misused as a result of this circumstance. According to the company, some business dealings with clients and suppliers can be affected as they try to fix the situation.

Suncor Company Subsidiaries

SubsidiaryImage

In 1967, we pioneered commercial development of Canada's oil sands โ€“ one of the largest petroleum resource basins in the world. Since then, Suncor has grown to become a globally competitive integrated energy company with a balanced portfolio of high-quality assets, a strong balance sheet and significant growth prospects. Suncorโ€™s operations include oil sands development and upgrading, conventional and offshore oil and gas production, petroleum refining, and product marketing under the Petro-Canada brand. Our use of innovative technology has made us an industry leader in the energy business โ€“ and with a strong strategy for growth, Suncor offers a solid foundation for you to continue building your career. As an employer, Suncor is one of the best companies in Canada, providing tremendous future potential where talented people thrive and lead. As our business evolves, so do our employment opportunities. Our work culture includes a dynamic mix of newcomers and experienced professionals, with a diversity of skills and expertise from all parts of Canada.

Loading...

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=suncor' -H 'apikey: YOUR_API_KEY_HERE'
newsone

Suncor Cyber Security News

2023-07-02T07:00:00.000Z
Suncor Energy cybersecurity incident once again highlights need for cyber resilience, operational continuity

Recent cybersecurity attacks, such as the Suncor Energy incident, once again serve as a reminder to the energy sector to prioritizeย ...

2023-08-17T07:00:00.000Z
Suncor CEO says company mostly recovered from June cyberattack

โ€œI'd rather have a root canal than go through one of these attacks again,โ€ President and CEO Rich Kruger said. Published Aug. 17, 2023.

2025-05-11T09:01:42.000Z
Suncor Energy suffers cybersecurity incident

Calgary-based Canadian oil company Suncor Energy Inc. has confirmed it has been the victim of a cyberattack.

2023-07-06T07:00:00.000Z
Suncor swaps out laptops after cybersecurity incident as energy sector takes stock of risks

Suncor is replacing employee computers after a cybersecurity incident last week shut down debit and credit processing at Petro-Canada gasย ...

2023-06-26T07:00:00.000Z
Canadian oil giant Suncor confirms cyberattack after countrywide outages

The issues began on Friday, when customers reported problems logging into the app and website for Petro-Canada, a gas station chain owned byย ...

2023-06-26T07:00:00.000Z
Suncor Energy hit by cyber attack; Petro-Canada gas stations impacted

Calgary-based Suncor Energy is the latest oil company to report it experienced a cyber security incident.

2023-07-10T07:00:00.000Z
Suncor Energy (SU) Makes Swift Response to Cybersecurity Breach

On or about Jun 21, 2023, Suncor Energy's IT network was accessed by an unauthorized party, leading to a cybersecurity breach. While theย ...

2023-07-06T07:00:00.000Z
Suncor Energy confirms hackers breached Petro-Canada gas stationsโ€™ customer rewards data

Suncor Energy, more than a week after launching an investigation into a cybersecurity incident, confirmed that an unauthorized party breached its IT network.

2023-06-28T07:00:00.000Z
Cybersecurity incident at Suncor knocks Canadian gas stations offline

Suncor, a major Canadian energy company, has confirmed that a cyberattack has hit the systems of its gas station chain Petro-Canada.

similarCompanies

Suncor Similar Companies

Organisation Ourhoud

Sonatrach (Sociรฉtรฉ Nationale pour la Recherche, la Production, le Transport, la Transformation, et la Commercialisation des Hydrocarbures s.p.a.) is an Algerian government-owned company formed to exploit the hydrocarbon resources of the country. Its diversified activities cover all aspects of Oil &

HALLIBURTON ENERGY SERVICES

Founded in 1919, Halliburton is one of the worldโ€™s largest providers of products and services to the energy industry. With approximately 40,000 employees, representing 130 nationalities in more than 70 countries, the company helps its customers maximize value throughout the lifecycle of the reservoi

Eram Holdings

Eram Holdings, since its humble beginning in the 1990s, has experienced significant growth. Today, we have expanded into a business conglomerate operating in 9 business verticals with headquarters in Saudi Arabia, regional offices in India, UAE and with over 150 offices spread across 13 countries in

PETROVIETNAM

Petrovietnamโ€šร„รดs business - Core business: + Exploration, Production, Refinery, Petrochemicals, Storage, Transportation and Service in Petroleum Field; + Importing and Exporting petroleum materials, equipment and productions; + Distributing oil and gas products and hydrocarbon materi

Baker Hughes

Baker Hughes (NASDAQ: BKR) is an energy technology company that provides solutions for energy and industrial customers worldwide. Built on a century of experience and conducting business in over 120 countries, our innovative technologies and services are taking energy forward โ€“ making it safer, clea

Hindustan Petroleum Corporation Limited

Hindustan Petroleum Corporation Limited (HPCL) is a Maharatna Central Public Sector Enterprise (CPSE) and a S&P Global Platts Top 250 Global Energy Company. HPCL has a strong presence in downstream hydrocarbon sector of the country with a sizable share in petroleum product marketing and also has bus

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Suncor CyberSecurity History Information

How many cyber incidents has Suncor faced?

Total Incidents: According to Rankiteo, Suncor has faced 3 incidents in the past.

What types of cybersecurity incidents have occurred at Suncor?

Incident Types: The types of cybersecurity incidents that have occurred incidents Data Leak and Cyber Attack.

How does Suncor detect and respond to cybersecurity incidents?

Detection and Response: The company detects and responds to cybersecurity incidents through third party assistance with consulting with outside specialists and law enforcement notified with contacted the necessary authorities and third party assistance with Collaborating with outside experts and law enforcement notified with Alerted the necessary authorities and communication strategy with Petro-Canada acknowledged the issues on Twitter and incident response plan activated with True and third party assistance with Outside experts and law enforcement notified with True and communication strategy with Twitter acknowledgment.

Incident Details

Can you provide details on each incident?

Incident : Cyber Security Incident

Title: Cyber Security Incident at Suncor

Description: A cyber security incident has happened to Suncor, the business has contacted the necessary authorities and is taking action by consulting with outside specialists to look into and remedy the matter. They do not currently know of any proof that customer, supplier, or employee data has been hacked or misused as a result of this circumstance. According to the company, some business dealings with clients and suppliers can be affected as they try to fix the situation.

Type: Cyber Security Incident

Incident : Cyberattack

Title: Suncor Cyberattack Disrupts Services in Major Canadian Cities

Description: A cyberattack caused widespread disruptions that shut down services over the weekend. The Canadian energy corporation Suncor has alerted the necessary authorities and is taking action while collaborating with outside experts to investigate and fix the matter. Problems were reported in Calgary, Ottawa, Toronto, and several other significant Canadian cities. Petro-Canada finally turned to Twitter to acknowledge the issues and to state that they were being fixed.

Type: Cyberattack

Incident : Cyberattack

Title: Suncor Cyberattack Disruptions

Description: A cyberattack caused widespread disruptions that shut down services over the weekend.

Type: Cyberattack

What are the most common types of attacks the company has faced?

Common Attack Types: The most common types of attacks the company has faced is Cyber Attack.

Impact of the Incidents

What was the impact of each incident?

Incident : Cyber Security Incident SUN41914823

Operational Impact: business dealings with clients and suppliers can be affected

Incident : Cyberattack PET01310723

Downtime: Service disruptions over the weekend

Operational Impact: Shutdown of services

Incident : Cyberattack SUN23169723

Systems Affected: Services in Calgary, Services in Ottawa, Services in Toronto, Services in other major Canadian cities

Which entities were affected by each incident?

Incident : Cyber Security Incident SUN41914823

Entity Type: Business

Industry: Energy

Incident : Cyberattack PET01310723

Entity Type: Energy Corporation

Industry: Energy

Location: Calgary, Ottawa, Toronto, Other major Canadian cities

Incident : Cyberattack SUN23169723

Entity Type: Energy Corporation

Industry: Energy

Location: Canada

Response to the Incidents

What measures were taken in response to each incident?

Incident : Cyber Security Incident SUN41914823

Third Party Assistance: consulting with outside specialists

Law Enforcement Notified: contacted the necessary authorities

Incident : Cyberattack PET01310723

Third Party Assistance: Collaborating with outside experts

Law Enforcement Notified: Alerted the necessary authorities

Communication Strategy: Petro-Canada acknowledged the issues on Twitter

Incident : Cyberattack SUN23169723

Incident Response Plan Activated: True

Third Party Assistance: Outside experts

Law Enforcement Notified: True

Communication Strategy: Twitter acknowledgment

How does the company involve third-party assistance in incident response?

Third-Party Assistance: The company involves third-party assistance in incident response through consulting with outside specialists, Collaborating with outside experts, Outside experts.

Investigation Status

What is the current status of the investigation for each incident?

Incident : Cyber Security Incident SUN41914823

Investigation Status: In Progress

Incident : Cyberattack PET01310723

Investigation Status: Ongoing

Incident : Cyberattack SUN23169723

Investigation Status: Ongoing

How does the company communicate the status of incident investigations to stakeholders?

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through were Petro-Canada acknowledged the issues on Twitter and Twitter acknowledgment.

Post-Incident Analysis

What is the company's process for conducting post-incident analysis?

Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as consulting with outside specialists, Collaborating with outside experts, Outside experts.

Additional Questions

Impact of the Incidents

What was the most significant system affected in an incident?

Most Significant System Affected: The most significant system affected in an incident were Services in Calgary, Services in Ottawa, Services in Toronto, Services in other major Canadian cities.

Response to the Incidents

What third-party assistance was involved in the most recent incident?

Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was consulting with outside specialists, Collaborating with outside experts, Outside experts.

Investigation Status

What is the current status of the most recent investigation?

Current Status of Most Recent Investigation: The current status of the most recent investigation is In Progress.

What Do We Measure?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge