By 
Romania’s largest electricity provider Electrica Group is currently responding to a cybersecurity incident, according to a company statement released Monday. Teams of specialists are working with national cybersecurity authorities to manage the situation, while the company assures that critical systems remain unaffected.
Electrica group provides essential services to over 4 million users and manages distribution networks across three major regions of the country: Northern and Southern Transylvania, as well as Northern Muntenia.
CEO of Electrica SA stated:
Electrica Group is under a cyber attack. The teams of specialists are working closely with the national
cybersecurity authorities to manage and resolve the incident, aiming to address the situation as quickly as
possible, identify the source of the attack, and limit its impact.We want to emphasize that the Group’s critical systems have not been affected, and any disruptions in
interaction with our consumers are the result of protective measures for internal infrastructure. These measures
are temporary and are designed to ensure the security of the entire system.
The company continues to maintain its core operations while working to resolve the incident.
Energy Minister Sebastian Burduja confirmed initial investigations point to a ransomware attack, a type of malicious software that encrypts systems and demands payment for their release.
Initial investigations show that it was a ransomware attack. The network equipment has been removed and is not affected.
As an eastern flank NATO member and strong supporter of Ukraine, Romania’s critical infrastructure has become an increasingly attractive target for malicious actors.
This seems an ongoing development, after Romania’s Intelligence Service (SRI) revealed state actor interference in the election process and also that over 85,000 cyberattacks targeted the country’s election infrastructure from November 19 to November 25, the night after the first presidential election round.