Electrica Group, a major entity in Romania's electricity distribution sector, is currently grappling with a ransomware attack. The incident, which remains active, could impact the company's extensive customer base spanning across Transilvania and Muntenia.
Company Overview
Electrica, founded as part of the National Electricity Company in 1998 and operating independently since 2000, is a pivotal utility provider in Romania, listed on both the Bucharest and London stock exchanges since 2014.
Current Incident
The company confirmed on Monday that it is working with national cybersecurity authorities to address what has been identified as an "ongoing cyberattack." CEO Alexandru Aurelian Chirita assured stakeholders that critical systems remain unaffected, and any disruptions are due to precautionary measures.
Official Comments
CEO Chirita emphasized that these safety measures are essential for safeguarding operational stability and protecting sensitive data. The company's top priority is to maintain uninterrupted electricity services.
Government Statement
The Romanian Ministry of Energy officially categorized the incident as a ransomware attack but confirmed that Electrica's SCADA systems, vital for controlling its distribution network, were not compromised. Energy Minister Sebastian Burduja reassured that network equipment has been isolated, and technical teams are actively mitigating risks.
Wider Context
This attack follows a tumultuous period in Romania's political landscape, where the Constitutional Court nullified presidential election results due to a significant influence campaign on TikTok linked to Russia. Additionally, a declassified report from Romania's Intelligence Service highlighted over 85,000 attempted cyberattacks on the nation's election infrastructure shortly after the initial round of voting.
As Electrica works to resolve the current cyber threat, this incident underscores the broader cybersecurity challenges facing critical infrastructure, particularly amidst geopolitical tensions.