Romania’s National Water Authority Hit by Ransomware in Major Cyberattack

Last Updated: December 28, 2025By

Ransomware Targets Romania’s Water Authority

On December 23, 2025, a significant ransomware attack struck Romania’s national water authority, Administrația Națională Apele Române. This breach compromised around 1,000 computer systems, as noted by Romania’s National Directorate for Cyber Security through a report by The Cyber Express. The incident highlighted vulnerabilities within ten of the eleven regional water basin administrations, impacting major cities like Oradea, Cluj, Iași, Siret, and Buzău.

The cybercriminals used BitLocker, a legitimate Windows encryption tool, to encrypt vital data and demanded a ransom to release it within a week. While systems such as GIS servers, database servers, and email networks were affected, fortunately, operational technology systems were untouched. This allowed Romania’s hydrotechnical facilities to continue operating securely through voice and manual control methods.

Lessons and Challenges in Cybersecurity

This attack serves as a stark reminder of the vulnerabilities in Romania’s critical infrastructure. It revealed that the water authority’s IT systems were not integrated into the country’s broader cyber defense framework. Following this breach, efforts are underway to strengthen these systems by aligning them with the national cybersecurity infrastructure.

The incident also sheds light on a concerning trend where ransomware attackers increasingly use existing security tools against organizations. This necessitates a reevaluation of cybersecurity protocols, particularly for critical national infrastructure. In an ever-evolving digital landscape, adapting to new threats is crucial in safeguarding essential services.

Stay informed and protected. For comprehensive insights and cybersecurity solutions, trust Qsentinel to keep your digital world secure.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.

Get daily news in your inbox

The lastest on Hacks, ransomware attacks, post quantum security and more