Australian government-owned energy company hit by ransomware attack
CS Energy confirmed hackers infiltrated its corporate network but says the incident has not impacted electricity generation
An energy company owned by the Queensland government has confirmed it was hit by a ransomware attack over the weekend.
CS Energy confirmed it has suffered a ransomware attack that took place on Saturday 27 November. The company said the incident occurred on its corporate network but has not impacted electricity generation at its Callide and Kogan Creek power stations, adding that it continues to generate and dispatch electricity.
CS Energy is focusing on restoring the security of its network and supporting employees, customers, and business partners with any questions they have. CEO Andrew Bills revealed that the company contained the ransomware attack by segregating the corporate network from other internal networks and enacting business continuity processes.
The energy company has also notified relevant state and federal agencies and is working closely with them as well as other cyber security experts. It has contacted its retail customers to reassure them there will be no impact on their electricity supply.
“Unfortunately, cyber events are a growing trend in Australia and overseas,” said Bills. “This incident may have affected our corporate network, but we are fortunate to have a resilient and highly skilled workforce who remain focused on ensuring CS Energy continues to deliver electricity to Queenslanders.”
IT Pro has contacted CS Energy to find out more information about the attack.
RELATED RESOURCE
How to reduce the risk of phishing and ransomware
Top security concerns and tips for mitigation
News of the attack comes after the Australian government published its Ransomware Action Plan in mid-October, which revealed it was looking to introduce legislative reforms to ensure cyber criminals are held to account for their actions. It would also apply harsher penalties to those who engage in ransomware or target the country’s critical infrastructure. The plan underlines the need to mandate ransomware incident reporting to the government and adds it does not condone ransom payments being made to hackers.
Cyber crime in Australia increased by nearly 13% in the past year as more Australians increased their dependence on the internet to work remotely, access services, and communicate, the Australia Cyber Security Centre said in a report from September. Around a quarter of cyber incidents reported were associated with the country’s critical infrastructure or essential services, and it recorded a 15% increase in ransomware reports.
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in lifeNews With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
-
Ransomware gangs are using employee monitoring software as a springboard for cyber attacksNews Two attempted attacks aimed to exploit Net Monitor for Employees Professional and SimpleHelp
-
Ransomware gangs are sharing virtual machines to wage cyber attacks on the cheap – but it could be their undoingNews Thousands of attacker servers all had the same autogenerated Windows hostnames, according to Sophos
-
Google issues warning over ShinyHunters-branded vishing campaignsNews Related groups are stealing data through voice phishing and fake credential harvesting websites
-
The FBI has seized the RAMP hacking forum, but will the takedown stick? History tells us otherwiseNews Billing itself as the “only place ransomware allowed", RAMP catered mainly for Russian-speaking cyber criminals
-
Everything we know so far about the Nike data breachNews Hackers behind the WorldLeaks ransomware group claim to have accessed sensitive corporate data
-
There’s a dangerous new ransomware variant on the block – and cyber experts warn it’s flying under the radarNews The new DeadLock ransomware family is taking off in the wild, researchers warn
-
Hacker offering US engineering firm data online after alleged breachNews Data relating to Tampa Electric Company, Duke Energy Florida, and American Electric Power was allegedly stolen
