March 17, 2024
Cyberattacks on energy suppliers, grid operators, research laboratories.

Cyber incident overview

Major cyberattacks on the energy industry 2023
License Creative Commons BY 4.0. Credits: KonBriefing Research
 
Diagram in high resolution (License: Creative Commons BY 4.0):

Which companies were affected by a cyber attack?

 
#DateCountryCityStateCompanyTypeStichworte
1January 15, 2023CanadaBaker Lake / ᖃᒪᓂᑦᑐᐊᖅ NUNUEnergy supply companyNunavut / ᓄᓇᕗᑦ, Kivalliq Region / ᑭᕙᓪᓕᖅ, Energy supply, power plants, power supply,Qulliq Energy Corporation (QEC) / ᖁᓪᓕᖅ ᐆᒻᒪᖅᑯᑎᓕᕆᔨᒃᑯᑦ ᑎᒥᖁᑖ
2February 2, 2023ItalyRomaEnergy supply companyLazio, Energy supply, power plants, power supply,Italia,Acea
3February 2023BrazilRio de JaneiroService providerEnergy supply, power plants, power supply,Aker Solutions / CSE Mecanica e Instrumentação SA
4February 2023GermanyKarlsruheBWUtilityBaden-Württemberg, Disposal, Utility,Energy supply, power plants, power supply,Stadtwerke Karlsruhe,Baden-WUrttemberg
5February 2023USAHouston TXTXOil and gas producerTexas, Harris County, Fort Bend County, Montgomery County, Energy supply, power plants, power supply,Encino Energy
6March 2023SwitzerlandZurich ZHZHTechnology companyCanton of Zürich, Zürich, Energy supply, power plants, power supply,Hitachi Energy,Canton of ZUrich
7April 13, 2023CanadaMontreal QCQCEnergy supply companyDDoS attackQuébec, Energy supply, power plants, power supply,Disposal, Utility,Hydro-Quebec
8April 17, 2023PeruArequipaEnergy supply companyEnergy supply, power plants, power supply,Disposal, Utility,Sociedad Eléctrica Del Sur Oeste (Seal)
9May 2023DenmarkEnergy companiesEnergy supply, power plants, power supply
10May 22, 2023IndiaJabalpur / जबलपुरEnergy supply companyMadhya Pradesh / मध्य प्रदेश, Energy supply, power plants, power supply,Disposal, Utility,M.P. Power Management Company Limited
11May 31, 2023GermanyMunichBYEnergy technologyBavaria, München, Munchen, Energy supply, power plants, power supply,Siemens Energy
12May 31, 2023NetherlandsThe HaguePetroleum companyZuid-Holland, Energy supply, power plants, power supply,Shell
13May 31, 2023NetherlandsArnhemPower grid operatorGelderland, Energy supply, power plants, power supply,Disposal, Utility,Tennet
14May 31, 2023OmanOil and gasEnergy supply, power plants, power supply,?
15May 31, 2023United KingdomOil and gasUK, Energy supply, power plants, power supply,United Kingdom,?
16May 31, 2023USAOak Ridge TNTNConsortium of universitiesTennessee, Anderson County, Roane County, College, University, Research,Energy supply, power plants, power supply,Oak Ridge Associated Universities (ORAU)
17May 31, 2023USAEnergy supplyEnergy supply, power plants, power supply,Logistics,?
18May 31, 2023USAHouston TXTXLogisticsTexas, Harris County, Fort Bend County, Montgomery County, Transportation,Logistics,Energy supply, power plants, power supply,Genesis Energy
19May 31, 2023USAOil and gasEnergy supply, power plants, power supply,?
20May 31, 2023USAHouston TXTXOil and gasTexas, Harris County, Fort Bend County, Montgomery County, Energy supply, power plants, power supply,Schlumberger / SLB
21May 31, 2023USACarlsbad NMNMRadioactive waste repositoryNew Mexico, Eddy County, Energy supply, power plants, power supply,Waste Isolation Pilot Plant (WIPP)
22May 31, 2023USAAustin TXTXService providerTexas, Travis County, Hays County, Williamson County, Energy supply, power plants, power supply,CLEAResult
23June 2023GermanyGüglingenBWSolar parksBaden-Württemberg, Landkreis Heilbronn, Energy supply, power plants, power supply,Finance, Money,hep global GmbH,Baden-WUrttemberg,GUglingen
24June 23, 2023CanadaCalgary ABABPetroleum companyAlberta, Energy supply, power plants, power supply,Suncor Energy / Petro-Canada
25July 2023IsraelHaifa / חֵיפָהOil refineryEnergy supply, power plants, power supply,Bazan Group
26August 18, 2023AustraliaSydney NSWNSWService providerNew South Wales, Energy supply, power plants, power supply,Energy One
27August 2023 ?FranceParisEnergy supply companyÎle-de-France, Energy supply, power plants, power supply,Disposal, Utility,Engie
28October 2023 ?GermanyMeschedeNWEnergy supply companyNorth Rhine-Westphalia, Hochsauerlandkreis, Energy supply, power plants, power supply,HochsauerlandEnergie GmbH (HE)
29November 2023 ?USAIdaho Falls IDIDNuclear research laboratoryIdaho, Bonneville County, Research and Development,Energy supply, power plants, power supply,Administration, Authority, Government, Public sector,Idaho National Laboratory (INL)
30November 22, 2023SloveniaLjubljanaEnergy supply companyEnergy supply, power plants, power supply,Holding Slovenske elektrarne (HSE)
31November 2023GermanyGevelsbergNWEnergy supply companyNorth Rhine-Westphalia, Ennepe-Ruhr-Kreis, Energy supply, power plants, power supply,Disposal, Utility,AVU AG
32November 2023CanadaRichmond Hill ONONPipeline operatorOntario, Regional Municipality of York, Energy supply, power plants, power supply,Logistics,Trans-Northern Pipelines Inc. (TNPI)
33December 2023 ?Kingdom of the NetherlandsWillemstadUtilityCuraçao, Disposal, Utility,Energy supply, power plants, power supply,Aqualectra
34December 9, 2023DenmarkHolstebroEnergy supply companyRegion Midtjylland, Energy supply, power plants, power supply,Jysk Energi A/S
35December 18, 2023IranPetrol stationsEnergy supply, power plants, power supply,Automobile, Automotive, Cars
36December 2023 ?USAAfton WYWYEnergy supply companyWyoming, Lincoln County, Energy supply, power plants, power supply,Disposal, Utility,Lower Valley Energy

Hacker attacks statistics

By month

Major cyberattacks on the energy industry 2023 by month
License Creative Commons BY 4.0. Credits: KonBriefing Research
 
Diagram in high resolution (License: Creative Commons BY 4.0):

By country

Major cyberattacks on the energy industry 2023 by country
License Creative Commons BY 4.0. Credits: KonBriefing Research
 
Diagram in high resolution (License: Creative Commons BY 4.0):

Notes

  • The statistics are based on the known incidents listed here.
  • Since only some of the cases become known, the evaluations are not representative.
  • Industries where incidents are immediately visible due to public access (e.g. healthcare) are more represented than others.
  • An incident may be assigned to multiple countries or industries. Also, a country cannot always be assigned. So the totals shown on the charts may be different.
  • The graphics may be reused according to the license Creative Commons Attribution 4.0 / CC BY 4.0 (attribution: KonBriefing Research).

Details, examples and sources

Flag CanadaJanuary 15, 2023
Cyber attack on a energy supply company in Canada
Qulliq Energy Corporation (QEC) / ᖁᓪᓕᖅ ᐆᒻᒪᖅᑯᑎᓕᕆᔨᒃᑯᑦ ᑎᒥᖁᑖ - Baker Lake / ᖃᒪᓂᑦᑐᐊᖅ, Nunavut / ᓄᓇᕗᑦ, Canada
https://www.qec.nu.ca/qulliq-energy-corp...
⭐⭐⭐ KonBriefing thinks: very good immediate communication by the affected organization.
Flag BrazilFebruary 2023
Cyberattack on a Brazilian subsidiary of a Norwegian service provider for the energy industry
Aker Solutions / CSE Mecanica e Instrumentação SA - Rio de Janeiro, Brazil
https://news.cision.com/aker-solutions-a...
⭐⭐⭐ KonBriefing thinks: very good immediate communication by the affected organization.
Flag GermanyFebruary 2023
Malware at a utility in Germany
Stadtwerke Karlsruhe - Karlsruhe, Baden-Württemberg, Germany
https://www.stadtwerke-karlsruhe.de/de/p...
⭐⭐⭐ KonBriefing thinks: very good updated information on the incident by the affected organization.
Flag IndiaMay 22, 2023
Ransomware at a energy supply company in India
M.P. Power Management Company Limited - Jabalpur / जबलपुर, Madhya Pradesh / मध्य प्रदेश, India
https://energy.economictimes.indiatimes....
Flag OmanMay 31, 2023
Oil and gas producer from Oman affected by cyber attack?
? - Oman
Vulnerabilities: Progress Software MOVEit Transfer
Flag UKMay 31, 2023
Oil and gas producer from the United Kingdom affected by cyber attack?
? - United Kingdom
Vulnerabilities: Progress Software MOVEit Transfer
Flag USAMay 31, 2023
U.S. energy company affected by cyber attack?
? - USA
Vulnerabilities: Progress Software MOVEit Transfer
Flag USAMay 31, 2023
Logistics company in Texas, USA affected by cyber attack
Genesis Energy - Houston, Texas, USA (Harris County, Fort Bend County, Montgomery County)
https://apps.web.maine.gov/online/aeview...
Vulnerabilities: Progress Software MOVEit Transfer
Flag USAMay 31, 2023
U.S. oil and gas producer affected by cyber attack?
? - USA
Vulnerabilities: Progress Software MOVEit Transfer
Flag USAMay 31, 2023
Oil company affected by cyber attack
Schlumberger / SLB - Houston, Texas, USA (Harris County, Fort Bend County, Montgomery County)
https://www.slb.com/resource-library/upd...
Vulnerabilities: Progress Software MOVEit Transfer
Flag USAMay 31, 2023
U.S. service provider for the energy industry affected by cyber attack
CLEAResult - Austin, Texas, USA (Travis County, Hays County, Williamson County)
https://apps.web.maine.gov/online/aeview...
Vulnerabilities: Progress Software MOVEit Transfer
Flag AustraliaAugust 18, 2023
Cyber attack on an Australian service provider for the energy sector
Energy One - Sydney, New South Wales, Australia
https://cdn-api.markitdigital.com/apiman...
Flag CuraçaoDecember 2023 ?
Cyber attack on a utility in Curaçao
Aqualectra - Willemstad, Curaçao, Kingdom of the Netherlands
https://curacao.nu/aqualectra-herstelt-n...
Flag DenmarkDecember 9, 2023
Cyber attack on a energy supply company in Denmark
Jysk Energi A/S - Holstebro, Region Midtjylland, Denmark
https://jyskenergi.dk/jysk-energi-har-af...
Flag USADecember 2023 ?
Cyber attack on a energy supply company in Wyoming, USA
Lower Valley Energy - Afton, Wyoming, USA (Lincoln County)
https://www.lvenergy.com/2023/12/28/cybe...

Overviews

How many companies and organizations were affected by cyberattacks?

KonBriefing Research had counted 36 successful cyberattacks on companies and organizations for the period.

When did cyber attacks take place?

For 2023, KonBriefing Research counted the following successful cyberattacks on companies and organizations: January (1)  •  February (4)  •  March (1)  •  April (2)  •  May (14)  •  June (2)  •  July (1)  •  August (2)  •  October (1)  •  November (4)  •  December (4)

Which industries were affected by cyberattacks?

For 2023, KonBriefing Research found successful cyberattacks on companies and organizations of the following industries: Energy industry (36)  •  Utility (9)  •  Technology (3)  •  Logistics (3)  •  Service provider (2)  •  Universities (1)  •  Transportation (1)  •  Research (1)  •  Public sector (1)  •  Finance (1)  •  Automotive (1) (Multiple assignments possible).

About KonBriefing Research

KonBriefing Research is an independent researcher and analyst in the field of IT security, information security, risk management and compliance. The company was founded in 2019 and is based in Germany.

About the author

Bert Kondruss
Author:
Bert Kondruss
Founder and managing director of KonBriefing Research

Cyber attacks worldwide

Cyber attacks worldwide
(Click the image to open)