Electrica Group, a Romanian energy services provider, is currently dealing with an ongoing ransomware attack. Serving over 3.8 million customers across Transilvania and Muntenia, Electrica is a crucial entity in the Romanian electricity distribution and supply market, having been listed on both the Bucharest and London stock exchanges since 2014. The company announced to investors that it is working closely with national cybersecurity authorities to manage and resolve the cyberattack, which was still active earlier today. Electrica CEO Alexandru Aurelian Chirita assured that the company’s critical systems remain unaffected, with disruptions in consumer interactions being due to protective measures for the internal infrastructure. These measures are temporary and aim to ensure the system’s overall security, while the company prioritizes maintaining electricity distribution and supply continuity and safeguarding personal and operational data. The Romanian Ministry of Energy identified the attack as ransomware, however the nature of the attack remains officially undisclosed, with speculation about potential pro-Russian involvement. The cyberattack follows Romania’s Constitutional Court decision to annul the presidential elections due to alleged Russian interference via a TikTok influence campaign. Additionally, a report from Romania’s Intelligence Service revealed over 85,000 cyberattacks on the country’s election infrastructure during the election period, from November 19th through 25th, 2024.