The European Network of Transmission System Operators for Electricity (ENTSO-E) revealed this week that threat actors penetrated its network.
ENTSO-E, the European Network of Transmission System Operators, represents 43 electricity transmission system operators (TSOs) from 36 countries across Europe, thus extending beyond EU borders. ENTSO-E was established and given legal mandates by the EU’s Third Package for the Internal energy market in 2009, which aims at further
ENTSO-E works with TSO on the definition of Europe’s energy and climate strategy. According to the organization, the attack only impacted the office network and did not affect any operational TSO system.
“A risk assessment has been performed and contingency plans are now in place to reduce the risk and impact of any further attacks,” reads the statement published by the company. “Our TSO members have been informed and we continue to monitor and assess the situation.”
“The incident only affects file exchange policies between Fingrid and ENTSO-E. We have instructed our staff based on the information received from ENTSO-E and we have implemented technical preparedness measures accordingly.” reported Finland’s TSO, Fingrid.
The attack is worrisome because threat actors have targeted a centralized authority in the attempt to impact one of the European electrical grids.
Another element of concern is the timing of the attack, in this period the Coronavirus outbreak is having an important impact on organizations and their personnel. In many cases, employees ordinary working to defend the organizations are involved in smart-working with a significant impact on their productivity and efficiency. The overall process could suffer important changes advantaging the attackers.
“An attacker may access these organizations to harvest sensitive information about
(SecurityAffairs – hackin, ENTSO-E)
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.