Electrica Group, Romania’s leading electricity distributor serving 3.8 million customers, is currently investigating a significant ransomware attack. The company, which provides nationwide electricity supply and maintenance services across Transilvania and Muntenia, confirmed the cyber incident on Monday.

CEO Alexandru Aurelian Chirita assured that critical systems remain unaffected, with any service disruptions resulting from preventive security measures. The company’s primary focus remains on maintaining continuous electricity distribution and protecting operational and customer data.

The Romanian Ministry of Energy confirmed the incident as a ransomware attack but emphasized that Electrica’s SCADA systems, responsible for distribution network control and monitoring, remain fully functional and isolated from the affected infrastructure. Energy Minister Sebastian Burduja stated that network equipment has been secured and technical teams are working to eliminate potential risks.

This attack follows recent cybersecurity challenges in Romania, including over 85,000 cyberattacks targeting the country’s election infrastructure between November 19-25, coinciding with the presidential election period. The timing is particularly significant as it follows the Constitutional Court’s decision to annul presidential elections due to a Russian-linked TikTok influence campaign.

Electrica, established in 1998 and independently operating since 2000, maintains its dual listing on both Bucharest and London stock exchanges while working closely with national cybersecurity authorities to resolve the ongoing situation.