Contents:
ERG, the leading wind power operator in Italy and one of the leaders on the European market, recently reported “only a few minor disruptions” on its IT&C infrastructure after a ransomware attack targeted its systems.
What Happened?
Although it was initially believed this was nothing more than a hacker attack, yesterday La Repubblica reported that the LockBit 2.0 ransomware group is responsible for the breach.
Launched in September 2019 as a ransomware-as-a-service, in June 2021 the LockBit ransomware gang announced a new major version for their tool – LockBit 2.0, claiming they significantly improved it for encryption speed.
In a notice on ICT disruptions, ERG stated:
Concerning the recent rumours in the media on hacker attacks on institutions and companies, ERG reports that it has experienced only a few minor disruptions to its ICT infrastructure, which are currently being overcome, also thanks to the prompt deployment of its internal cybersecurity procedures.
The company confirms that all its plants are operating smoothly and have not experienced any downtime, thus ensuring continuous business operations.
With a growing presence in France, Germany, Poland, Romania, Bulgaria, and the United Kingdom, the ERG Energy Group recently agreed to sell its hydroelectric power asset portfolio to Enel as part of a €1 billion deal.
Concerning the rumours in the media on hacker attacks on institutions and companies ERG reports that it has experienced only a few minor disruptions to ICT infrastructure which are currently being overcome to the prompt deployment of its internal #cybersecurity procedures (1/2)
— ERG (@ERGnow) August 4, 2021
Lazio Ransomware Attack
The attack on ERG comes shortly after residents of Lazio were blocked from booking new vaccination appointments on the Vaccine Registration System due to a system breach, suspected to be a ransomware attack.
It is believed that the cyberattack was either conducted by the RansomEXX ransomware operation or LockBit 2.0, but so far neither of them claimed responsibility for the incident.
Lazio President Nicola Zingaretti revealed in a Facebook post that residents of the area (including Rome) won’t be able to book new appointments for several days.