Incident

Romanian Electrica Group energy supplier reports ransomware attack


Learn More

Electrica Group, one of Romania's largest energy suppliers, is reporting a ransomware attack. The company serves approximately 3.93 million households across 18 counties, covering about 40.7% of Romania's territory.

The incident comes following recent cyberattacks that forced the Romanian government to cancel elections after their systems were reportedly targeted over 85,000 times.

According to the Electrica Group's CEO, the company's critical systems remained unaffected by the attack. Any service disruptions experienced by consumers were attributed to protective measures implemented to secure their internal infrastructure. The company emphasized that these measures are temporary and designed to maintain system security while ensuring continuity in electricity distribution and supply.

Romania's Energy Minister Sebastian Burduja confirmed that initial investigations indicated a ransomware attack. He noted that network equipment had been isolated and remained unaffected, while the SCADA systems of Distributie Electric Power Romania were fully functional and isolated. Technical teams and security partners were deployed to eliminate any remaining risks.

The specific impact and potential ransom demands have not been disclosed.

The Romanian National Cybersecurity Directorate (DNSC) says the Lynx ransomware gang breached Electrica Group, one of the largest electricity suppliers in the country.

Romanian Electrica Group energy supplier reports ransomware attack