A recent ransomware attack against the Luxembourg gas and electricity supply company Creos has been claimed by BlackCat Ransomware threat actors. Around July 22, 2022, owners of Creos reported a significant cyberattack stating “a number of data were exfiltrated from computer systems or made inaccessible by hackers” and that the exfiltration of personal identifiable information was plausible. The threat group BlackCat, also tracked as ALPHV and the believed rebrand of Darkside, is a notorious ransomware-as-a-service (RaaS) organization known for their unusual use of Rust in their malicious payloads and underlying ties to other threat organizations responsible for major attacks on critical infrastructure. After claiming responsibility for the attack on Creos, BlackCat actors threatened to leak 180,000 files (150 gigabytes) worth of data from the attack if the ransom was not paid. It is currently unknown what the ransom demands are; however, the data exfiltrated supposedly includes personal identifiable information such as emails, passports, legal documents, and consumer monthly bills. CTIX will continue to monitor the fallout of this ransomware attack and provide additional updates once more information is released.