Ransomware Attack on Levantina, Ingenieria y Construcción

Company Profile

Levantina, Ingenieria y Construcción, a prominent Spanish engineering and construction firm, has been actively engaged in significant projects across various sectors. Notably, the company's portfolio includes the construction of a viaduct in Annaba, Algeria, and the development of a building dedicated to the administrative activities of municipalities in the comarca.

Vulnerabilities

The exact vulnerabilities that facilitated the ransomware attack on Levantina, Ingenieria y Construcción remain unspecified. Nonetheless, it is evident that the assault impacted the company's back-end systems, leading to disruptions in online bill payment functionalities. This situation implies potential exploitation of network security weaknesses or software vulnerabilities by the attackers.

Impact

The cyberattack orchestrated by the ransomware group vicesociety resulted in the exfiltration of personal data and necessitated the temporary shutdown of certain infrastructure components. While the company's primary operations in water or wastewater treatment remained unaffected, the breach of personal data poses a significant concern.

Response

In response to the cyber incident, Levantina, Ingenieria y Construcción's IT and security incident response teams have been diligently working with law enforcement and external partners to mitigate the attack's impact and prevent future breaches. Similar to Veolia North America's experience with a ransomware attack, defensive strategies were employed, including the isolation of compromised back-end systems and servers to facilitate recovery processes.

Sources

• Levantina, Ingenieria y Construcción - Access to Annaba - ARGELIA
• Veolia North America and Southern Water hit by ransomware attacks, data breach concerns arise
• Hackers stole data from multiple electric utilities in recent ransomware attack on a US government contractor
• Water facility operator says ransomware attack affected North America division
• One of the world’s biggest operators of water and wastewater systems dealt with a ransomware attack last week that affected its operations in North America