DisclosureLens
GLOBALMalwareEnergy & UtilitiesUtilitiesRansomwareStormRansom DemandedActor NamedData Leak ThreatenedData PublishedHigh

Petrocare Construction

bd_67468af019c9b7e4 · schema v1 · pii pii-v2

Severity

High

Discovered

Filed

Sep 2, 2026

To disclose

Affected

Not disclosed

Confidence

50%
Full breach record for Petrocare Construction

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Storm on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: Energy & UtilitiesDiscovered: 2026-09-03

Source: Ransomware.live

Post text · scraped from the leak site

Petrocare Construction is a company founded on old fashioned principals - yet implementing cutting edge technology and state-of-the-art building methods, and we are proud of this. We have and continue to make a difference by "Teaming in Partnership" with our clients. Important to us is - what is important to you, namely: accurate job costing, timely progress reports, effective construction management, qualified staff, subcontractors and more. Because our team is in partnership with you, we will always work hard to maintain a solid, long-term relationship with you - that is our way of doing business. We understand the challenges of modern construction. We are pro-active in our response to the complex needs of environmental, technological and time sensitive issues. It is our clear focus to meet and exceed the needs of our clients. We are specialists in commercial, industrial, wholesale and retail petroleum facilities. Whether it be design/build construction, environmental remediation ordecommissioning we will serve your needs all over Western Canada. We are a company of people, equipment and technology that will provide the catalyst to meet and exceed your building construction and site maintenance needs for today and beyond. The company headquarters is located in 1202 Avenue X South, Saskatoon, SK S7M 3H9, Canada. 51-200 Employees

Incident timeline — mostly unverified

? — ?

Breach window unknown

Sep 2, 2026

Claim posted

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Claim → filing

Compliance clock

Not assessable

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

Evidence ladder

Leak-site claimThis record

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.

Source ceiling

  • actor name
  • victim claim
  • ransom/leak status
  • discovery date
  • materiality
  • notification
  • affected count
  • confirmed data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this group

storm

56 victims claimed globally56 tracked hereFull profile →