Romanian energy company Complexul Energetic Oltenia hit by ransomware attack
Learn More
The Complexul Energetic Oltenia (CEO), one of Romania's state-controlled energy producers, was hit by a ransomware attack on December 26, 2025, at approximately 1:40 AM.
The attack, identified as the "Gentlemen" ransomware variant, compromised the company's business IT infrastructure, resulting in encrypted files and widespread system disruptions. Officials claim that the functionality of the National Energy System is secure.
The breach affected enterprise resource planning (ERP) systems, document management applications, email services, and the company's public website. Potentially compromised or encrypted data includes:
- Business documents and files
- Corporate communications and emails
- Enterprise system data and records
- Document management repositories
The number of affected individuals is not disclosed. The company isolated all affected systems to prevent further spread of the ransomware and reported the incident to the National Cyber Security Directorate (DNSC), the Ministry of Energy, and other relevant authorities.
The company's IT specialists immediately began rebuilding affected systems on new infrastructure using existing backup copies. The full scope of the incident is under investigation, including potential data theft.
