Wind turbine maker Vestas hit by cyber attack
Danish firm says hackers managed to obtain company data and knock out parts of its IT network
The world’s biggest wind turbine manufacturer has said it was forced to shut down its IT systems due to a cyber attack over the weekend.
Danish firm Vestas announced that hackers managed to obtain company data as well as knock out parts of its internal IT infrastructure, which continue to be “shut down as a precaution”.
Following the attack on Friday, the company issued an update on Monday morning revealing it had “initiated a gradual and controlled reopening of all IT systems” as it continues to investigate the incident.
“There is no indication that the incident has impacted third party operations, including customer and supply chain operations,” the company stated, adding that its “manufacturing, construction and service teams have been able to continue operations, although several operational IT systems have been shut down as a precaution.”
Vestas, which operates in 80 countries across five continents, including the UK, US, Germany, Italy, the Netherlands, Taiwan, India, Australia, China, and Brazil, is the world’s biggest wind turbine manufacturer and servicer, employing approximately 25,000 people. Its partners include tech giants Lenovo and SAP, which are not thought to have been affected by the attack. IT Pro has contacted both companies for comment.
The company has not named the perpetrator of the attack, or whether the cyber attack involves ransomware.
RELATED RESOURCE
Prevent fraud and phishing attacks with DMARC
How to use domain-based message authentication, reporting, and conformance for email security
The attack follows a number of similar incidents involving US infrastructure providers including Colonial Pipeline and the Texas Power Grid, as well as UK energy giant NPower. Research conducted by cyber security firm Hornetsecurity found that the energy sector has been the leading target for cyber criminals, accounting for at least 16% of officially known attacks.
George Patterson, director of Oxford-based cyber security recruitment specialist Arrowforth, told IT Pro last month that the rise of this type of cyber attack could be attributed to the energy sector being “seen as a rather unethical industry to younger generations (most cyber hackers are young)”.
“Cynically, they know they have money and are likely to pay out to continue operations,” he added.
For example, Colonial Pipeline reportedly paid a $5 million ransom to Darkside, a Russian based cyber gang, to quickly restore fuel supplies to the US East Coast.
-
Cyber crime activities peak later in lifeNews With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
-
Acer launches new Channel Partner Portal on 50th anniversaryNews The digital platform includes a vast library of training documentation and Acer products, and also tools to compare models
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in life
News With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
-
Ransomware gangs are using employee monitoring software as a springboard for cyber attacksNews Two attempted attacks aimed to exploit Net Monitor for Employees Professional and SimpleHelp
-
Ransomware gangs are sharing virtual machines to wage cyber attacks on the cheap – but it could be their undoingNews Thousands of attacker servers all had the same autogenerated Windows hostnames, according to Sophos
-
Google issues warning over ShinyHunters-branded vishing campaignsNews Related groups are stealing data through voice phishing and fake credential harvesting websites
-
The FBI has seized the RAMP hacking forum, but will the takedown stick? History tells us otherwiseNews Billing itself as the “only place ransomware allowed", RAMP catered mainly for Russian-speaking cyber criminals
-
Everything we know so far about the Nike data breachNews Hackers behind the WorldLeaks ransomware group claim to have accessed sensitive corporate data
-
There’s a dangerous new ransomware variant on the block – and cyber experts warn it’s flying under the radarNews The new DeadLock ransomware family is taking off in the wild, researchers warn
-
Hacker offering US engineering firm data online after alleged breachNews Data relating to Tampa Electric Company, Duke Energy Florida, and American Electric Power was allegedly stolen
