https://pwnsy.com/tools/cyber-watch/saudi-arabia/Sourced cyber incidents and official statements, from pwnsy Cyber Watch.enSun, 08 Nov 2026 00:00:00 +0000https://nca.gov.sa/en/news/report-on-key-economic-indicators-in-the-cybersecurity-sector-in-the-kingdom-2026/3b868585c78d23abWed, 14 Oct 2026 00:00:00 +0000The NCA reported the Saudi cybersecurity market reached SAR 16.3 billion in 2025.https://pwnsy.com/tools/cyber-watch/saudi-arabia/#all8e3d252691f1789cMon, 12 Oct 2026 00:00:00 +0000N0n listed NEOM Ports on its leak site and threatened to publish tariff and invoicing records. NEOM has not commented. Sources: https://www.dexpose.io/n0n-ransomware-group-strikes-neom-ports/, https://www.ransomware.live/id/TkVPTSBQb3J0cyAoaW5kdXN0cmlhbCBwb3J0IG9wZXJhdGlvbnMpQE4wbghttps://nca.gov.sa/en/news/registration/c379d2863e06ff54Fri, 02 Oct 2026 00:00:00 +0000The NCA repeated its call for providers of cybersecurity services, products and solutions to register through the Haseen portal.https://nca.gov.sa/en/news/national-campaign/4beb2bd0e825a7f2Thu, 01 Oct 2026 00:00:00 +0000The NCA launched the sixth edition of its national cybersecurity awareness campaign.https://pwnsy.com/tools/cyber-watch/saudi-arabia/#alld6366bd1ab33c2d1Mon, 31 Aug 2026 00:00:00 +0000The Gentlemen listed the engineering consultancy on its leak site. Sources: https://www.ransomware.live/id/U2F1ZGkgQ29uc3VsdGluZyBTZXJ2aWNlcyBTQVVEIENPTlNVTFRAdGhlZ2VudGxlbWVuhttps://pwnsy.com/tools/cyber-watch/saudi-arabia/#allceee54587516d0e8Tue, 14 Jul 2026 00:00:00 +0000BlackNevas listed the Riyadh jewellery maker on its leak site and threatened to publish its data. Sources: https://www.dexpose.io/blacknevas-ransomware-targets-lazurde-jewelry-company/, https://www.ransomware.live/id/TCdhenVyZGVAYmxhY2tuZXZhcwhttps://pwnsy.com/tools/cyber-watch/saudi-arabia/#allc5a094177f2858c4Wed, 10 Jun 2026 00:00:00 +0000The car rental company told the market that attackers gained unauthorised access to a limited portion of some customers' data through its mobile app. It said no financial or banking data was affected and operations continued normally. Sources: https://english.mubasher.info/news/4625010/Budget-Saudi-confirms-limited-customer-data-breach/, https://www.eyeofriyadh.com/news/details/budget-saudi-detects-limited-customer-data-breach-on-apphttps://pwnsy.com/tools/cyber-watch/saudi-arabia/#all21042d1d85271463Sun, 31 May 2026 00:00:00 +0000BinDawood Holding said it contained a limited intrusion that exposed part of the order data of some BinDawood Markets customers through its app. It fixed the vulnerability, brought in an NCA-registered security firm and notified regulators. Sources: https://banker.news/138604https://pwnsy.com/tools/cyber-watch/saudi-arabia/#alld8382d07c9baf8b4Tue, 03 Mar 2026 00:00:00 +0000The Iran-linked group Handala claimed a breach and posted watermarked engineering documents. TechJuice found the documents dated to about 2016 and saw no evidence of a fresh compromise. Aramco has not commented. Sources: https://www.techjuice.pk/?p=223095, https://www.ransomware.live/id/QXJhbWNvQGhhbmRhbGEhttps://pwnsy.com/tools/cyber-watch/saudi-arabia/#all8a2a61fe71f566b4Tue, 24 Feb 2026 00:00:00 +0000INC Ransom listed ACWA Power on its leak site. The company has not commented. Sources: https://www.breachsense.com/breaches/acwa-power-data-breach/