Chicago-based solar and wind developer Invenergy said that it has been hacked, following a recent trend in energy-data security breaches. Russia-linked hackers “REvil” claimed involvement in the breach.
The attack was reported June 11 and is the latest in a series of hacks claimed on REvil’s dark web site, including recent attacks on Quanta, a Taiwanese supplier of Apple, and JBS, an industrial meatpacker.
In a blog post, REvil claimed to have downloaded 4 terabytes of “sensitive data” from Invenergy, including projects, contracts, and non-disclosure agreements.
It also claimed to have taken “very personal and spicy” details about billionaire chief executive Michael Polsky from his personal computer. The attack follows a new hacking trend of “extortionware” focusing on reputational damage rather than operationally sensitive information.
Invenergy said that its operations remain unimpacted by the attack, and no data was encrypted. The company said that it did not intend to pay a ransom.
This content is protected by copyright and may not be reused. If you want to cooperate with us and would like to reuse some of our content, please contact: email@example.com.
This is very unfortunate. Issues like these are bound to happen if the internal teams are not prepared. My company is a huge fan of Ninjio for our employees as it prepares them for awareness against problems like this.
I do wish the best for Invenergy and hope no further issues come forward. The big suggestion here is to always be on your toes and to make sure your internal teams are prepared.
By submitting this form you agree to pv magazine using your data for the purposes of publishing your comment.
Your personal data will only be disclosed or otherwise transmitted to third parties for the purposes of spam filtering or if this is necessary for technical maintenance of the website. Any other transfer to third parties will not take place unless this is justified on the basis of applicable data protection regulations or if pv magazine is legally obliged to do so.
You may revoke this consent at any time with effect for the future, in which case your personal data will be deleted immediately. Otherwise, your data will be deleted if pv magazine has processed your request or the purpose of data storage is fulfilled.
Further information on data privacy can be found in our Data Protection Policy.