As previously announced on June 25, 2023, Suncor (TSX: SU) (NYSE: SU) experienced a cybersecurity incident. We immediately activated our business continuity plans, engaged leading IT and cybersecurity experts and notified relevant authorities. Based on our investigation to date, we determined that our IT network was accessed by an unauthorized party on or about June 21, 2023.

The incident has not impacted the safety and reliability of our field operations. However, our Petro-Canada business experienced temporary disruptions that have largely been resolved. Our focus throughout has been to protect our IT systems and minimize disruption to our customers and suppliers.

We have determined that our Petro-PointsTM program has been impacted. The unauthorized party obtained members' basic contact information. We are notifying Petro-Points members and the appropriate privacy regulators.

If we discover additional information was obtained, we will notify affected parties as appropriate.