An energy company owned by the Queensland government has confirmed it was hit by a ransomware attack over the weekend.
CS Energy confirmed it has suffered a ransomware attack that took place on Saturday 27 November. The company said the incident occurred on its corporate network but has not impacted electricity generation at its Callide and Kogan Creek power stations, adding that it continues to generate and dispatch electricity.
CS Energy is focusing on restoring the security of its network and supporting employees, customers, and business partners with any questions they have. CEO Andrew Bills revealed that the company contained the ransomware attack by segregating the corporate network from other internal networks and enacting business continuity processes.
The energy company has also notified relevant state and federal agencies and is working closely with them as well as other cyber security experts. It has contacted its retail customers to reassure them there will be no impact on their electricity supply.
“Unfortunately, cyber events are a growing trend in Australia and overseas,” said Bills. “This incident may have affected our corporate network, but we are fortunate to have a resilient and highly skilled workforce who remain focused on ensuring CS Energy continues to deliver electricity to Queenslanders.”
IT Pro has contacted CS Energy to find out more information about the attack.
RELATED RESOURCE
How to reduce the risk of phishing and ransomware
Top security concerns and tips for mitigation
News of the attack comes after the Australian government published its Ransomware Action Plan in mid-October, which revealed it was looking to introduce legislative reforms to ensure cyber criminals are held to account for their actions. It would also apply harsher penalties to those who engage in ransomware or target the country’s critical infrastructure. The plan underlines the need to mandate ransomware incident reporting to the government and adds it does not condone ransom payments being made to hackers.
Cyber crime in Australia increased by nearly 13% in the past year as more Australians increased their dependence on the internet to work remotely, access services, and communicate, the Australia Cyber Security Centre said in a report from September. Around a quarter of cyber incidents reported were associated with the country’s critical infrastructure or essential services, and it recorded a 15% increase in ransomware reports.
-
Prolific ransomware operator added to Europe’s Most Wanted list as US dangles $10 million rewardNews The US Department of Justice is offering a reward of up to $10 million for information leading to the arrest of Volodymyr Viktorovych Tymoshchuk, an alleged ransomware criminal.
-
Jaguar Land Rover “did the right thing” shutting down systems to thwart cyber attackNews The attack on Jaguar Land Rover highlights the growing attractiveness of the automotive sector
-
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalitiesNews The attack on IT systems supplier Miljödata has impacted public sector services across the country
-
A notorious hacker group is ramping up cloud-based ransomware attacksNews The Storm-0501 threat group is refining its tactics, according to Microsoft, shifting away from traditional endpoint-based attacks and toward cloud-based ransomware.
-
Security researchers have just identified what could be the first ‘AI-powered’ ransomware strain – and it uses OpenAI’s gpt-oss-20b modelNews Using OpenAI's gpt-oss:20b model, ‘PromptLock’ generates malicious Lua scripts via the Ollama API.
-
Data I/O shuts down systems in wake of ransomware attack
News Regulatory filings by Data I/O suggest the costs of dealing with the attack could be significant
-
Average ransom payment doubles in a single quarterNews Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new groupNews The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
