Shell's Buyback Machine Grinds On as Cl0p's Data Heist Claims Hang in the Balance

Shell dismisses Cl0p's 89GB data breach claim, citing no operational impact; shares rise 27% YTD amid ongoing buybacks and renewables divestment.

The ransomware group Cl0p has thrown down the gauntlet, claiming to have exfiltrated roughly 89 gigabytes of internal Shell data — construction blueprints, facility photographs, project schedules and test reports among the haul. The London-listed oil major, however, is not taking the bait. Shell says it has opened an investigation since the cybercriminals took credit for the breach, but stresses that neither the authenticity, age nor scale of the purported data dump has been independently verified. Crucially for shareholders, there has been no reported disruption to refinery operations, drilling activity, production networks or core IT services — the business, in other words, is running as normal.

That operational resilience is doing the heavy lifting where it matters most: the share price. The stock closed Friday at €39.89, a modest 0.3% dip, but the seven-day picture tells a more reassuring story with a 2.3% gain. Year-to-date, the equity has climbed 27%, leaving it just 3.5% shy of its 52-week high of €41.32, struck in late March.

The Buyback Drumbeat Continues

While the cyber question works its way through the system, Shell's capital returns machinery shows no sign of losing rhythm. The company purchased 1,173,496 of its own shares on Thursday across the London Stock Exchange, Chi-X, BATS and Euronext Amsterdam, with Goldman Sachs International executing the trades. The shares are earmarked for cancellation — a move that incrementally boosts earnings per remaining share.

That Thursday tranche followed similar purchases on 18, 19 and 20 August, with the programme running under the buyback and off-market transaction framework announced in July. Mid-month, Shell had pulled in nearly 1.6 million shares across six trading venues in a single day, at prices ranging between roughly €238.47 and €238.50 per share. The current programme is slated to run until 23 October, with Goldman making independent trading decisions throughout.

These steady repurchases are the visible expression of a capital allocation strategy reaffirmed over the summer: Shell intends to return 40% to 50% of operating cash flow to shareholders across the cycle, blending a progressive dividend targeting 4% annual growth with flexible buybacks.

A Slimmer Renewables Footprint

Alongside the buyback cadence and the cyber investigation, Shell continues to reshape its power business. In early August, the company signed an agreement to offload its European onshore renewables portfolio to TotalEnergies. The deal spans assets in Italy, the Netherlands, Spain and the UK — roughly 0.5 gigawatts of capacity either operational or under construction — plus a pipeline of further planned projects. Financial terms were not disclosed, and the transaction is expected to close by the end of 2026.

The Broader Buyback Wave

Shell is far from alone in leaning on repurchases. Samsung Electronics said Friday it is targeting a record shareholder return of between 90 and 110 trillion won for the current year, while SK hynix is planning a 40 trillion won programme — the largest in South Korean stock market history. HSBC, meanwhile, has bought back over 18 million shares worth around $376.8 million since the start of August. Analysts see this clustering of programmes as evidence of robust cash generation across global corporates, responding to institutional investor expectations.

For Shell specifically, the analyst community remains broadly constructive. The majority of ratings sit at "Buy" with a price target of £40.00. The stock traded at €39.96 on Friday, roughly 3.3% below its 52-week peak.

The real question for investors is whether Cl0p's claims carry substance or fizzle out as empty posturing. Until operational fallout materialises, the buyback engine and portfolio strategy are likely to shape the share price far more decisively than the cybersecurity saga.