Ransomware attack on Greek Gas Distributor DESFA

Year

2022

Month

August

Reference number

20220801

Impact area

Shore, Offshore

Incident location

Gulf of Megara

Incident country

Greece

Victim country

Greece

Victim identity

DESFA

Victim Type

National Natural Gas System Operator

Method

Ransomware

Attacker country

Russia

Summary:

In August 2022 Greece's largest natural gas distributor DESFA confirmed that they suffered a limited scope data breach and IT system outage following a cyberattack. In a public statement DESFA explained that hackers attempted to infiltrate its network but were thwarted by the quick response of its IT team. However, some files and data were accessed and possibly "leaked," so there was a network intrusion, even if limited. The confirmation of the attack comes after data was leaked on Friday by the Ragnar Locker ransomware operation, a threat actor that began operations over two years ago and has had numerous high-profile attacks in 2021.

Reference URL

https://www.bleepingcomputer.com/news/security/greek-natural-gas-operator-suffers-ransomware-related-data-breach/
https://www.documentcloud.org/documents/22156322-desfa-statement?responsive=1&title=1
https://industrialcyber.co/ransomware/europol-reveals-ragnar-locker-ransomware-gang-dismantled-following-multinational-law-enforcement-operation/
https://www.malwarebytes.com/blog/news/2023/10/ragnar-locker-taken-down
https://www.secureblink.com/cyber-security-news/new-donut-leaks-group-is-involved-in-a-series-of-ransomware-attacks-1
https://www.cm-alliance.com/cybersecurity-blog/biggest-ransomware-attacks-demands-payments-2022-2021