Royal Dutch Shell Plc  .com Rotating Header Image

Shell hit by massive data breach


Personal details of 170,000 workers at the controversial oil giant have been mailed to campaigners.

By Richard Thurston, 15 Feb 2010 at 12:09

Shell logo

A database containing contact details of 170,000 workers of controversial oil giant Royal Dutch Shell has been emailed to campaigning groups opposed to the company’s activities.

Seven non-governmental groups – including human rights groups and environmental campaigners such as Greenpeace – plus anti-Shell campaigning website received the database, which is thought to have been sent by a disaffected former employee of the company.

Many of those groups are upset at the way Shell is purported to be operating in some countries, particularly Nigeria.

The database is thought to contain names, telephone numbers and further details on permanent and contract employees. A lengthy covering letter was attached to the database, purporting to be from more than 100 Shell staff.

Shell has demanded that the activists delete the database.

Shell said it has already launched an investigation, and argues that the breach does not pose a security risk. It could provide no further comment at the time of writing.

If it is found that Shell is guilty of an offence under the Data Protection Act, it could be fined.

The Information Commissioner’s Office (ICO) – the UK’s data watchdog – said it takes breaches affecting individuals’ personal data “very seriously”.

A spokesperson for the ICO said: “Shell has notified us of a security breach regarding a significant amount of people’s personal details. We are looking into how this data breach occurred and will decide what, if any regulatory action, is required.”

Shell – if it is found guilty – may escape lightly. Fines levied by the ICO for failing to protect against the loss of personal data tend to be under £5,000.

It is ironic timing. In two months, new rules are set to be introduced which will mean companies could be fined up to £500,000 if they are reckless with personal information.

The leaked database is about six months old, implying that ex-employees may have been involved. Shell cut 5,000 jobs last year.

This website and sisters,,,, and, are owned by John Donovan. There is also a Wikipedia segment.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.