Wood Group Mustang, an oil and gas engineering firm operating from Houston, experienced a cyberattack in 2023 that impacted OT (operational technology) engineering systems. Production workflow and project systems disrupted.
Initial access via spear-phishing targeting a senior engineer with OT system access. Credential compromise gave attacker lateral access to engineering design systems adjacent to OT infrastructure. No confirmed impact to industrial control systems but close proximity noted.
Sentinel ($89/ep/mo) — 24/7 SOC + SIEM. Fortress ($109/ep/mo) — Sentinel + EDR management + vulnerability management. Command ($129/ep/mo) — Fortress + vCISO + compliance mapping + IR plan. See full tier comparison →
| Regime | Standard / Citation | Gap Identified |
|---|---|---|
| NERC CIP | CIP-007-6 | System security management — OT-adjacent systems lacked endpoint security and access management controls |
| TDPA | Tex. B&C Code §521.053 | Any exfiltrated employee PII triggers TX notification requirement |
CoreRecon cites verifiable public sources only. No speculation on unverified attribution is published. Threat actor attribution appears only where publicly confirmed by law enforcement or the organization.
Free $2,500 security posture assessment for Texas organizations. We map your gaps against the same attack vectors used in this incident. No contract, no commitment.