Oltenia Energy Complex Hit by Major Ransomware Attack

Last Updated: December 31, 2025By

Ransomware Attack Disrupts Romanian Energy Giant

On December 26, a major ransomware attack hit Complexul Energetic Oltenia, Romania’s largest coal-powered energy company, causing a significant IT disruption. This organization, nearly four decades old and employing over 19,000 people, runs four power plants that produce about 3,900 MWh, contributing 30% of Romania’s electricity.

The cyber attack led to the encryption of critical files and systems, impacting vital applications such as ERP, email, and the corporate website, though the National Energy System’s integrity remained intact. Efforts are underway to restore operations, and authorities have been notified to assist in resolving the issue.

Recovery and Investigation Efforts

The company is actively rebuilding its IT systems using backups, while also examining the breach for any potential data theft. Several authorities, including Romania’s National Cyber Security Directorate and the Ministry of Energy, have been informed. A formal complaint has been lodged with DIICOT, as the incident bears similarities to the modus operandi of the Gentlemen ransomware group.

This group, known for encrypting files and demanding ransoms, typically gains entry by exploiting compromised credentials and targeting vulnerable online services. The company has not yet appeared on the group’s data leak site, which suggests ongoing negotiations.

Romania has seen a spike in ransomware, with similar attacks on entities like the National Water Administration and Electrica Group. This trend highlights the crucial need for strong cybersecurity across all sectors to combat rising cyber threats.

Ready to fortify your digital space? Discover top-tier cybersecurity services at Qsentinel to keep your operations safe. Protect what matters. Contact us today!

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.

Get daily news in your inbox

The lastest on Hacks, ransomware attacks, post quantum security and more