Oil or fuel facility
PDVSA — cyberattack suspends oil-cargo administration
Disclosed 15 December 2025; deliveries resuming 17 December
Caracas, Venezuela (PDVSA headquarters; nationwide systems)
What happened
A cyberattack disrupted PDVSA's centralized administrative systems, forcing personnel to disconnect systems and use manual records. PDVSA said production and fuel supply were unaffected, while company and shipping sources reported that export loading instructions and cargo deliveries were temporarily suspended and several scheduled tankers turned away. Deliveries began resuming by 17 December after operational sites were isolated from the central system. PDVSA and Venezuela's oil ministry blamed US-linked foreign interests, but published no evidence and responsibility remains disputed. This incident is not treated as proven to be the separate Lotus Wiper campaign.
When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.
- Evidence
- Documented
- Confidence
- High
- Infrastructure
- Oil or fuel facility
- Latitude
- 10.4800°
- Longitude
- -66.9000°
Attribution
Responsibility disputed United States, alleged by PDVSA and the Venezuelan government
No supporting technical evidence was published, the United States did not acknowledge responsibility, and independent reporting did not establish an attacker.