EDP Renewables Confirms Ransomware AttackEDP Renewables Confirms Ransomware Attack
Its North American branch was notified of the attack because intruders reportedly gained access to 'at least some information' stored in its systems.
July 8, 2020
Energy giant EDP Renewables North America (EDPR NA) has confirmed a ransomware attack that affected information systems at parent company Energias de Portugal (EDP) on April 13.
EDP Group, which provides energy to more than 11 million customers, began investigating the attack on April 13 and notified law enforcement. Attackers demanded a ransom of 1,580 Bitcoins, or more than $10 million USD, BleepingComputer reports. It seems Ragnar Locker ransomware was used to target the firm; its operators claim to have at least 10TB of files.
On May 8, EDPR NA learned attackers had gained unauthorized access to at least some of the data stored on its information systems, said CEO Miguel Angel Prado in a letter to customers.
The North American branch is now warning customers because its systems hold data including names and Social Security numbers. It stores these to make payments under terms of customer leases, the company says, and doesn't hold driver's license numbers or credit/debit card data.
The company is offering customers one year of free data protection via Experian as a proactive measure. It has also taken steps to improve the security of users' personal data, such as new IT processes and login requirements including multifactor authentication, Prado says.
Read more details here.
Check out The Edge, Dark Reading's new section for features, threat data, and in-depth perspectives. Today's featured story: "The Entertainment Biz Is Changing, but the Cybersecurity Script Is One We've Read Before."
About the Author(s)
You May Also Like
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023
What's In Your Cloud?Nov 30, 2023
Everything You Need to Know About DNS AttacksNov 30, 2023
9 Traits You Need to Succeed as a Cybersecurity Leader
The Ultimate Guide to the CISSP
Quantifying the Gap Between Perceived Security and Comprehensive MITRE ATT&CK Coverage
Protecting Critical Infrastructure: The 2021 Energy, Utilities, and Industrials Cyber Threat Landscape Report
5 Reasons To Move your PKI Deployment to the Cloud