Power utility HSE suffers serious cyberattack

HSE did not present the details of the attack aside from saying on Saturday that the situation is being resolved by "all competent services" and that the supply of electricity is "not at risk in any way."

The news portal 24ur reported that the attack was "substantial" and that the attackers had penetrated the security and control system as well as fire alarms.

The report quotes unnamed sources as saying that the attack involved a cypto virus, a type of ransomware, which has also been confirmed by Uroš Svete, the director of the Government Information Security Office.

While Svete confirmed a crypto virus had been detected, he did not specify whether or how many files may have been locked, which is what crypto viruses do. He said there had been no ransomware request so far.

He said the attack was first detected on Wednesday night and seemed to have been contained, but by Friday night the situation "intensified" and the infection began to spread.

HSE is working on the problem with in-house teams and external experts. The police have been informed, as has the National Security Council given that energy is classified as critical infrastructure.

"We are doing everything to detect the cause of the attack ... and hence identify any potential broader threats," he said.

Svete reiterated several times that the supply of electricity is not at risk and that the company tackled the problem by the book. He also noted that energy systems are always attractive targets for cybercriminals.

The Information Security Office is keeping a close eye on the situation.

HSE operates the Šoštanj thermal plant, which accounts for around a third of domestic electricity production, as well as chains of hydro plants on the Drava, the Sava and the Soča. The group accounts for roughly 60% of domestic electricity production.