Australian government-owned energy company hit by ransomware attack
CS Energy confirmed hackers infiltrated its corporate network but says the incident has not impacted electricity generation
An energy company owned by the Queensland government has confirmed it was hit by a ransomware attack over the weekend.
CS Energy confirmed it has suffered a ransomware attack that took place on Saturday 27 November. The company said the incident occurred on its corporate network but has not impacted electricity generation at its Callide and Kogan Creek power stations, adding that it continues to generate and dispatch electricity.
CS Energy is focusing on restoring the security of its network and supporting employees, customers, and business partners with any questions they have. CEO Andrew Bills revealed that the company contained the ransomware attack by segregating the corporate network from other internal networks and enacting business continuity processes.
The energy company has also notified relevant state and federal agencies and is working closely with them as well as other cyber security experts. It has contacted its retail customers to reassure them there will be no impact on their electricity supply.
“Unfortunately, cyber events are a growing trend in Australia and overseas,” said Bills. “This incident may have affected our corporate network, but we are fortunate to have a resilient and highly skilled workforce who remain focused on ensuring CS Energy continues to deliver electricity to Queenslanders.”
IT Pro has contacted CS Energy to find out more information about the attack.
RELATED RESOURCE
How to reduce the risk of phishing and ransomware
Top security concerns and tips for mitigation
News of the attack comes after the Australian government published its Ransomware Action Plan in mid-October, which revealed it was looking to introduce legislative reforms to ensure cyber criminals are held to account for their actions. It would also apply harsher penalties to those who engage in ransomware or target the country’s critical infrastructure. The plan underlines the need to mandate ransomware incident reporting to the government and adds it does not condone ransom payments being made to hackers.
Cyber crime in Australia increased by nearly 13% in the past year as more Australians increased their dependence on the internet to work remotely, access services, and communicate, the Australia Cyber Security Centre said in a report from September. Around a quarter of cyber incidents reported were associated with the country’s critical infrastructure or essential services, and it recorded a 15% increase in ransomware reports.
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
