Australian government-owned energy company hit by ransomware attack
CS Energy confirmed hackers infiltrated its corporate network but says the incident has not impacted electricity generation
An energy company owned by the Queensland government has confirmed it was hit by a ransomware attack over the weekend.
CS Energy confirmed it has suffered a ransomware attack that took place on Saturday 27 November. The company said the incident occurred on its corporate network but has not impacted electricity generation at its Callide and Kogan Creek power stations, adding that it continues to generate and dispatch electricity.
CS Energy is focusing on restoring the security of its network and supporting employees, customers, and business partners with any questions they have. CEO Andrew Bills revealed that the company contained the ransomware attack by segregating the corporate network from other internal networks and enacting business continuity processes.
The energy company has also notified relevant state and federal agencies and is working closely with them as well as other cyber security experts. It has contacted its retail customers to reassure them there will be no impact on their electricity supply.
“Unfortunately, cyber events are a growing trend in Australia and overseas,” said Bills. “This incident may have affected our corporate network, but we are fortunate to have a resilient and highly skilled workforce who remain focused on ensuring CS Energy continues to deliver electricity to Queenslanders.”
IT Pro has contacted CS Energy to find out more information about the attack.
RELATED RESOURCE
How to reduce the risk of phishing and ransomware
Top security concerns and tips for mitigation
News of the attack comes after the Australian government published its Ransomware Action Plan in mid-October, which revealed it was looking to introduce legislative reforms to ensure cyber criminals are held to account for their actions. It would also apply harsher penalties to those who engage in ransomware or target the country’s critical infrastructure. The plan underlines the need to mandate ransomware incident reporting to the government and adds it does not condone ransom payments being made to hackers.
Cyber crime in Australia increased by nearly 13% in the past year as more Australians increased their dependence on the internet to work remotely, access services, and communicate, the Australia Cyber Security Centre said in a report from September. Around a quarter of cyber incidents reported were associated with the country’s critical infrastructure or essential services, and it recorded a 15% increase in ransomware reports.
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
-
Threat actors ditch ‘spray and pray’ attacks in shift to targeted exploitationNews A dip in ransomware volumes points to a more targeted approach focused on vulnerability exploitation
-
Security leaders overconfident about ransomware recovery
News Few manage to recover all their data, and many experience business disruption
-
German authorities want your help finding the hackers behind GandCrab and REvilNews Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk are believed to have made millions from ransomware as a service schemes
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in life
News With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
