RansomHub Strikes Empresa de Energía del Bajo Putumayo: A Cybersecurity Threat in Colombia's Energy Sector
RansomHub Targets Empresa de Energía del Bajo Putumayo in Ransomware Attack
Attack Overview
Empresa de Energía del Bajo Putumayo (EEBP), a key player in Colombia's energy sector, has fallen victim to a ransomware attack orchestrated by the cybercriminal group RansomHub. The attack led to the theft of approximately 20.2 gigabytes of data. Details about the specific nature of the stolen data remain undisclosed, but a sample has been publicly leaked by the attackers as proof of the breach.
Company Profile
Founded in 1997, EEBP operates primarily in the Lower Putumayo region, where it is instrumental in the generation, transmission, and distribution of electricity. With an installed capacity of 19.2 MW predominantly from hydroelectric sources, EEBP serves several municipalities including Mocoa and Puerto Asís. The company is a mixed-ownership entity, involving both departmental government and private investors.
Industry Standout
EEBP is notable for its integration into the National Interconnected System of Colombia, playing a crucial role in the regional energy infrastructure. Its focus on hydroelectric power highlights its commitment to sustainable energy solutions. As a regulated entity under the Energy and Gas Regulation Commission (CREG), EEBP adheres to stringent standards, underscoring its importance in the national energy landscape.
Vulnerabilities to Cyber Threats
The nature of EEBP's operations and its critical role in the energy supply chain make it a potential target for cybercriminals looking to cause significant disruption or extract hefty ransoms. The involvement of both governmental and private sectors in its ownership can also complicate the cybersecurity governance structure, potentially leading to vulnerabilities in its cyber defenses.
About RansomHub
RansomHub, a relatively new player in the ransomware arena, operates on a Ransomware-as-a-Service model, attracting affiliates with a high share of ransom proceeds. The group's tactics resemble those of established Russian cybercrime syndicates, although it claims to avoid targeting certain countries and non-profit organizations.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!