Italian energy agency GSE hit by BlackCat ransomware group

On the Sunday night of the 28th of August 2022, Italy’s energy agency, Gestore dei Servizi Energetici SpA he experienced a ransomware attack by the BlackCat/ALPHV ransomware gang who claimed responsibility for the attack. It has been reported that GSE’s website and systems were taken down to block the threat actors from gaining access to the data on GSE’s systems.

Cybersecurity authorities and police in Italy are still conducting an investigation into the attack and are trying to determine what data was compromised during the incident. The BlackCat ransomware group added a new entry to its dark web data leak site claiming to have stolen roughly 700GB of files from GSE’s servers. The BlackCat ransomware claims that the stolen data contains confidential data, including contracts, reports, project information, accounting documents, and other internal documentation.