Ransomware Attack Cripples Romania's Largest Energy Producer

The second day of Christmas brought an unexpected disruption to Romania's energy sector as the Oltenia Energy Complex, the country's largest coal-based energy producer, fell victim to a ransomware attack.

Impact and Response

The attack, carried out by the Gentlemen ransomware group, encrypted some documents and temporarily disabled several computer applications, including ERP systems, document management applications, email services, and the company's website. While the energy production was not jeopardized, the company's activity was partially affected.

Upon detecting the attack, the IT teams of Oltenia Energy Complex started rebuilding the affected systems on a new infrastructure, using existing backups. The company is still assessing the extent of the damage and determining whether any data was stolen before the systems were encrypted.

Investigations and Collaboration

The incident has been reported to the National Cyber Security Directorate, the Ministry of Energy, and other relevant authorities. A criminal complaint has also been filed with DIICOT, a law enforcement agency tasked with investigating and prosecuting cybercrime offenses.

The Gentlemen ransomware group, which emerged in August, is known for using compromised credentials and targeting Internet-exposed services to gain initial access to victims' networks. The group deploys README-GENTLEMEN.txt ransom notes and encrypts documents using the .7mtzhh file extension.

Relevance to North East India

While the attack occurred in Romania, it serves as a reminder of the global threat posed by ransomware attacks. As digital transformation continues to reshape industries, organizations in North East India must remain vigilant and proactive in safeguarding their IT infrastructure.

Ransomware Attacks in Romania

This incident follows a series of ransomware attacks on Romanian companies and organizations, including the water management authority and a major electricity supplier and distributor. These attacks underscore the importance of robust cybersecurity measures and incident response plans.

Looking Forward

As the digital landscape evolves, so too must our defenses against cyber threats. Organizations must invest in comprehensive cybersecurity solutions, prioritize employee training, and maintain a culture of security awareness.