Central Hudson Gas & Electric
January 1, 2013
•[ hack, energy ]
hacked
Tibber
November 10, 2024
•[ hack, energy ]
In November 2024, the German electricity provider Tibber suffered a data breach that exposed the personal information of 50k customers. The data included names, email addresses, geographic locations (city and postcode) and total spend on purchases. The data was provided to HIBP by a source who requested it be attributed to "Threat Actor 888".
People's Energy
December 16, 2020
•[ leak, energy ]
In December 2020, the UK power company People's Energy suffered a data breach. The breach exposed almost 7GB of files containing 359k unique email addresses along with names, phones numbers, physical addresses and dates of birth. The incident also included People's Energy staff email addresses and bcrypt password hashes (no customer passwords were exposed). The data was provided to HIBP by a source who requested it be attributed to pom@pompur.in.
MyPertamina
November 1, 2022
•[ leak, energy ]
In November 2022, the Indonesian oil and gas company Pertamina suffered a data breach of their MyPertamina service. The incident exposed 44M records with 6M unique email addresses along with names, dates of birth, genders, physical addresses and purchases.
Newpark Resources
October 29, 2024
•[ ransomware, malware, energy ]
Newpark Resources, a key supplier for oilfields says a ransomware attack caused disruptions and limited access to certain systems.
Refinadora Costarricense de Petróleo
November 27, 2024
•[ ransomware, malware, energy ]
Refinadora Costarricense de Petrleo (RECOPE), the state-owned energy provider for Costa Rica is hit with a ransomware attack, requiring the company to shift to manual operations and call in help from abroad.
Undisclosed nuclear-related organization
October 1, 2024
•[ espionage, malware, energy ]
Researchers at Kaspersky reveal that the Lazarus Group, the threat actor linked to the Democratic People's Republic of Korea (DPRK), has been observed leveraging a "complex infection chain" targeting at least two employees belonging to an unnamed nuclear-related organization. The attacks, part of Operation Dream Job, culminated in the deployment of a new modular backdoor referred to as CookiePlus,
Electrica Group
December 9, 2024
•[ ransomware, malware, energy ]
Electrica Group, a key player in the Romanian electricity distribution and supply market, is investigating a ransomware attack.
ENGlobal Corporation
November 25, 2024
•[ ransomware, malware, energy ]
ENGlobal Corporation, a major contractor for the energy industry confirms in a notice to regulators that it is dealing with a ransomware attack that has hindered operations.
Government sites and nuclear facilities in Iran
October 12, 2024
•[ hack, ddos, government ]
Government sites and nuclear facilities in Iran are hit by disruptive cyberattacks.
Halliburton
August 21, 2024
•[ hack, energy ]
Halliburton, one of the world's largest providers of services to the energy industry, confirms a cyberattack that forced it to shut down some of its systems earlier this week.
Evolution Mining
August 8, 2024
•[ ransomware, malware, energy ]
Evolution Mining informs that it has been targeted by a ransomware attack, which impacted its IT systems.
Lvivteploenergo
January 22, 2024
•[ hack, malware, energy ]
Researchers at Dragos reveal that a previously unseen malware, dubbed FrostyGoop, able to disrupt industrial processes, was used in a cyberattack against a district energy company in Ukraine, resulting in two days without heat for hundreds of people during sub-zero temperatures.
Iberdrola
May 7, 2024
•[ leak, energy ]
Spanish multinational electrical utility Iberdrola says a cyber incident to a supplier in the beginning of May resulted in a data breach involving 850,000 Spanish customers.
Atlas
May 1, 2024
•[ ransomware, malware, energy ]
The Back Basta extortion group claims to have breached Atlas, one of the largest national distributors of fuel in the United States. Black Basta purportedly stole 730 GB of data
Northern Minerals
June 4, 2024
•[ ransomware, malware, energy ]
Northern Minerals issues an announcement warning that it suffered a cybersecurity breach resulting in some of its stolen data being published on the dark web. The BianLian ransomware group claims responsibility for the attack,
