An Indian power firm confirmed being hit with a cyberattack

A cyberattack campaign again targeted an Indian firm after reports about the country’s leading power generation company suffered through hackers. The power company has confirmed the cyberattack through a statement, revealing that the incident has impacted some of its IT systems.

Serving about 12 million customers, the leading Indian power firm is a Mumbai-based electric utility firm that generates, transmits, and distributes electricity in the country. The power company also mentioned taking appropriate steps to retrieve and restore the affected IT systems. Currently, all customer-facing portals have been temporarily taken offline while other touch points are restricted for access as preventive checks are at hand.

 

The Indian power firm refused to provide further comments on the incident’s attack nature.

 

According to the researchers, the electric company has not shared more details about the cyberattack, including its scope, nature, and overall impact on the organisation. Furthermore, it is still unknown whether any proprietary data has been stolen.

Moreover, the firm reiterated that they are implementing all measures to control and mitigate the incident. A representative stated that their critical operational systems remain functional, thus alleviating concerns for all its customers.

The Maharashtra Police said that their cybersecurity wing had received intelligence about a security threat against all electricity firms in India. For this reason, all the concerned firms are immediately alerted, and an audit check of firewalls is employed.

The cybersecurity of India’s nationwide electricity network remained a challenge for the government. In April, there were reports about Chinese-backed threat groups targeting the Indian power sector, allegedly part of a long-term project. However, China’s foreign ministry spokesperson has denied the accusations, saying that several US-allied countries are also victims of US-backed cyberattacks.

Since the electric company has not shared more details about the incident, experts recommend people from the affected areas be vigilant about possible cybersecurity threats. Our security researchers in iZOOlogic will provide more updates on this news as they become available.