Lockbit Attacks Portuguese Water Utility Company

June 23, 2023

INCIDENT

Águas e Energia do Porto said on February 8 it had been hit with a cyberattack, with its security team able to limit the damage. Public water supply and sanitation were not affected by the attack.

The LockBit group added the company to its leak site on February 18, according to cybersecurity expert Dominic Alvieri. LockBit gave the utility until March 7 to pay a ransom, threatening to publish stolen information from Águas e Energia do Porto systems if the deadline passed without payment.

“Due to the incident, some customer services suffered constraints," the utility said. The company was still able to process customer requests at in-person service desks, and it urged people to get virtual service tickets that could be obtained instead of standing in line.

The utility did not respond to requests for comment about an update on the situation.

Incident Date

February 8, 2023

Location

Portugal

Estimated Cost


No cost values disclosed.

Type of Malware

No Malware identified

Threat Source