Energy (Includes Power and Utilities) Archives

Cyberattack at Australia’s Origin Energy

July 22, 2026

Sydney, Australia-based electric and oil and gas provider, Origin Energy Limited is investigating a data security incident it reported on Wednesday involving unauthorized access to some customers’ data where personally identifiable information ended up stolen in the hack.
Origin said it is continuing to work find the amount of its customers that fell victim to the attack. The company also said it is working with external cybersecurity experts to assist with the investigation.
For those affected by the incident the stolen data includes name, address, date of birth, contact phone number and account information, as well as the last four digits of a credit card, or the last three digits of a bank account. The company added incomplete credit card or bank account information cannot end up used to make purchases or access accounts.

Polish Power Plant Shut Down

December 29, 2025

Winds farms were not the only utility attacked this past December as a steam turbine and the process-water treatment system at a Polish combined heat and power (CHP) plant ended up shut down by attackers that gained entry via a private cellular network.
That attack came on the heels of the December Polish wind farm and large CHP plant hack, which destroyed equipment. A small CHP plant also fell victim to an attack and CERT Polska just released that information. The information on the attack became public during DEF CON in Las Vegas last week as Marcin Dudek, head of CERT Polska, presented details on the incident.
The plant in Poland supplies heat to 50,000 residents. The plant’s steam turbine and a water treatment system used to produce process water ended up shut down, interrupting the cogeneration process, in which electricity and heat generate simultaneously. Thanks to the prompt response of the CHP plant’s operators, the December 29 incident resulted only in a short-term outage and did not disrupt heat supplies to consumers.

Ransomware Attack at Advanced Power Services

November 12, 2025

Boston, Massachusetts-based power generation infrastructure provider, Advanced Power Services (NA) LLC, suffered a cyberattack in August last year and is now informing victims their personally identifiable information ended up stolen in the hack.
Advanced Power Services just notified victims an unauthorized third party accessed a portion of its computer network between August and November 2025, exposing some of their personal information.
As it turns out, the company detected suspicious activity within a portion of its computer network on November 12, 2025.

Cyberattack Shuts Down UK Power Plant

July 26, 2026

As suspected Iranian-based hackers hit water facilities in 12 states in the United States, the same country also ended up linked shutting down a UK power plant for four days, government officials said.
The incident involved a small-scale energy generator, according to the UK government, which said that at no point was there a risk to the wider energy system. However, it marks an apparent escalation in the threat posed by Iran after the UK said it had given permission for the U.S. to launch “defensive” operations against Tehran from British bases.
The incident took place at the same time as a series of attacks on U.S. water infrastructure last month, which affected 12 states.
Iran’s Islamic Revolutionary Guard Corps (IRGC) is suspected in the attack

Cyberattack at Jasper-Newton Electric Cooperative

August 18, 2026

Kirbyville, Texas-based Jasper-Newton Electric Cooperative, Inc. suffered a cyberattack where 257 people fell victim to the attack when personally identifiable information ended up stolen in the hack.
The cooperative reported the incident to the Texas Attorney General on August 18. Stolen in the attack were victims’ names, Social Security number information and driver’s license number.
When the incident occurred was not immediately available. Jasper-Newton Electric Cooperative is a non-profit electric utility provider headquartered in Kirbyville, TX.

Ransomware Attack at German Utility, Stadtwerke Landsberg

September 1, 2026

German utility, Stadtwerke Landsberg KU, suffered a cyberattack September 1, resulting in the encryption of key IT systems.
Stadtwerke Landsberg KU is a public municipal utility company owned by the city of Landsberg am Lech, Germany, that provides essential local services like power, water, and public infrastructure.
“First and foremost: operations regarding the electricity grid, water supply, wastewater treatment plant, district heating, fiber-optic network, charging infrastructure, the “Inselbad” pool complex, and parking garages have not been affected by the attack,” the company said in an advisory. “However, the utility’s staff are currently available by phone and email only to a limited extent.”

Talen Energy Hit in Cyberattack

January 27, 2026

Houston, Texas-based Talen Energy Corporation suffered a cyberattack in January and is now informing victims their personally identifiable information ended up stolen in the hack.
“On January 27, 2026, we experienced a cybersecurity incident,” the company said in a notice to victims of the attack. “Upon discovering unauthorized activity on certain of our systems, we initiated an investigation with the assistance of leading cybersecurity experts.”
As a result of the investigation, the company determined an unauthorized actor obtained a copy of certain files containing people’s personal information.

Cyberattack at CenterPoint Energy

September 14, 2026

Customer data ended up stolen from Houston, Texas-based energy provider, CenterPoint Energy, Inc., when the company became aware of a cyberattack earlier this month when it saw an online post, according to an advisory.
“In September 2026, CenterPoint Energy, Inc. became aware of an online post by a third party claiming to have obtained a data set containing certain of the company’s customer information,” according to an 8-K report filed with the Securities and Exchange Commission (SEC) on Monday, September 14. “Upon becoming aware of the post, the company promptly took action and activated its cybersecurity incident response protocols, initiated an investigation with the assistance of third-party cybersecurity experts, and took steps to further protect the company’s systems.”
Even with an attack on CenterPoint, the company wanted to ensure everyone there was no impact on the delivery of electric and gas services, which remain operational and undisrupted.

Cyberattack at Ecopetrol, Colombia Energy Provider

July 17, 2026

Colombia’s energy giant, Ecopetrol S.A., suffered a cyberattack as threat actors gained unauthorized access to certain digital resources as well as an attempted ransomware attack that ended up blocked by the controls implemented across the company and its subsidiaries, the company said Friday.
The unauthorized access affected cloud-based file storage environments of approximately 15 subsidiaries (including the company), resulting in the download of data associated with approximately 3,300 user accounts.
As a result of the attack, reported Friday, July 17, the unidentified threat actor communicated extortion demands, threatening to publicly disclose the stolen information.

India Nuclear Plant Suffers Ransomware Attack

May 29, 2026

India’s largest nuclear plant, Kudankulam, suffered a ransomware attack where blueprints of parts of its facilities and ‌supplier details ended up stolen in the hack.
The Kudankulam nuclear power plant, located in Tamil Nadu, is the largest of India’s seven nuclear plants and central to Prime Minister Narendra Modi’s ambitious plans to expand the country’s atomic energy ⁠capacity.
Businessman Anil Ambani’s Reliance Group, one of the plant’s contractors, told Reuters in a statement there was a “partial breach” of its data on a server hosted by third-party Indian data center service provider Yotta, and they informed the government about the incident.

« Older Entries