How Enel moves against hackers
Enel suffered two ransomware attacks in 2020, but the group led by Starace paid no ransom
"Enel does not accept extortion attempts and confirms that it has not paid any type of ransom".
Thus the group led by Francesco Starace, by answering questions from shareholders, reveals the strategy against hackers.
Enel suffered 2 cyber attacks in 2020, while the company blocked and identified an average of 1.7 million incoming malicious emails or emails attributable to spam every day, over 300 viruses and over 150 attacks.
All the details.
ENEL'S CYBER SPENDING
The company spent a good 52.6 million euros on cyber security in 2020.
THE TWO COMPUTER ATTACKS
The company faced two "ransomware" attacks in 2020. And "in both cases, it promptly detected the ongoing attacks on its IT network, promptly activating all the procedures previously defined to deal with this type of event", explains the company, responding to a shareholder on the subject during the recent shareholders' meeting , specifying that the group “successfully prevented the completion of destructive activities on data and systems, thus preserving the operational continuity of the service. Furthermore, the protection measures adopted have made it possible to prevent hackers from accessing the most sensitive servers and applications ”.
ACCESS TO EMPLOYEE DATA
With the second attack, the hackers had access to “a limited number of personal data of some employees.
“Enel – reads the replies – immediately informed the employees concerned and all the competent authorities, providing all possible detailed information. In particular, the Data Protection Authority on 23 December 2020 determined the conclusion of the examination of the violation of the personal data subject to notification and the filing of the related files ".
ENEL DOES NOT PAY HACKERS
On the occasion of the attacks, Enel immediately informed all the competent authorities and did not accept "extortion attempts". The company confirmed to the shareholders "that it had not paid any type of redemption".
NOT JUST ATTACKS
In addition to cyber attacks, the energy group blocked “every day an average of 1.7 million malicious emails inbound or attributable to spam, over 300 viruses and over 150 attacks on corporate web portals. Also in 2020, over 700 internet domains with illicit use of the Enel brand and over 400 fake Enel profiles on social networks were detected ”, explains the company.
WHAT HAPPENED IN BRAZIL
Cyber problems also in Brazil, but not related to cyber attacks. There was an “unauthorized disclosure of the personal data of a portion of customers in the city of Osasco, in the state of São Paulo. Enel Distribuição São Paulo has directly and individually informed the customers affected by the data theft, published information on its website and notified the event to the competent Brazilian authorities ”.
This is a machine translation from Italian language of a post published on Start Magazine at the URL https://www.startmag.it/energia/come-si-muove-enel-contro-gli-hacker/ on Thu, 27 May 2021 04:28:21 +0000.