Company Details
hidroelectrica-s-a
615
11,802
22
hidroelectrica.ro
0
HID_1628203
In-progress

Hidroelectrica Company CyberSecurity Posture
hidroelectrica.roHidroelectrica este principalul producător de energie electrică din România, un jucător important în domeniul hidroenergetic în Europa și principalul furnizor de servicii de sistem din România, având un rol important pentru securitatea SEN. Societatea deține și exploatează 182 de centrale hidroelectrice, 5 stații de pompare, un parc eolian cu o putere instalată totală de 108 MW și are o capacitate totală instalată de producere a energiei hidroelectrice de 6,3 GW. Societatea are șapte sucursale hidroelectrice și o sucursală ce administrează parcul eolian Crucea, Porțile de Fier și Vâlcea fiind cele mai importante din punct de vedere al capacităților acestora de producție a energiei și ponderilor în producția de energie totală a Grupului. Societatea s-a angajat să producă energie 100% din surse regenerabile și a jucat, încă de la început, un rol esențial în proiectarea și crearea de concepte tehnologice și operaționale care au devenit standardul în sectorul sau de activitate. Totodată, Hidroelectrica este vânzător angro, precum și furnizor de energie electrică direct către clienții finali, clienți casnici (rezidențiali) și noncasnici (incluzând afaceri din diverse sectoare industriale, cum ar fi construcția de automobile, telecomunicații și construcții etc). Ca producător de energie din sursă hidro și, mai recent, din sursă eoliană, societatea valorifică sinergiile existente între portofoliul de producție și cel de furnizare, dar și cele generate prin diversificarea portofoliului de producție către alte surse regenerabile, cum ar fi energia eoliană și solară prin mixarea acestora cu sursa hidro. Începând cu data de 12 iulie 2023, societatea este listată la Bursa de Valori București, la sfârșitul lunii octombrie 2023, Hidroelectrica ocupând locul 1 în top tranzacționare la BVB, cu o valoare de 2,8 miliarde RON.
Company Details
hidroelectrica-s-a
615
11,802
22
hidroelectrica.ro
0
HID_1628203
In-progress
Between 700 and 749

Hidroelectrica Global Score (TPRM)XXXX

Description: **Romania’s Largest Coal Energy Provider Hit by Ransomware Attack** Romania’s largest coal-based energy producer, **Oltenia Energy Complex (Complexul Energetic Oltenia)**, suffered a **ransomware attack** on **December 26**, disrupting its IT infrastructure. The state-owned company, which employs **19,000 people** and supplies **30% of Romania’s electricity**, reported that the incident encrypted files and temporarily disabled critical systems, including **ERP platforms, document management tools, email services, and its website**. While the attack **partially affected operations**, the company confirmed that the **National Energy System remained stable**. IT teams immediately began restoring systems from backups, though the full impact—including potential data theft—is still under assessment. Authorities, including the **National Cyber Security Directorate, Ministry of Energy, and DIICOT (Romania’s cybercrime investigation unit)**, were notified, and a criminal complaint was filed. The attack has been attributed to the **Gentlemen ransomware group**, which emerged in **August 2024** and is known for exploiting compromised credentials and exposed services. The gang typically leaves **README-GENTLEMEN.txt** ransom notes and appends the **.7mtzhh** extension to encrypted files. Though the group has listed nearly **40 victims** on its leak site, Oltenia Energy Complex has not yet appeared, suggesting possible ransom negotiations. This incident follows another recent attack on **Romanian Waters (Administrația Națională Apele Române)**, the country’s water management authority, which disrupted **1,000 systems** across 10 regional offices earlier in December—though core operations remained unaffected. Romania has faced a surge in ransomware attacks, including a **2023 breach of Electrica Group** by the **Lynx gang** and a **February 2024 Backmydata ransomware attack** that forced over **100 hospitals** offline.


Hidroelectrica has 6.38% more incidents than the average of same-industry companies with at least one recorded incident.
Hidroelectrica has 26.58% more incidents than the average of all companies with at least one recorded incident.
Hidroelectrica reported 1 incidents this year: 0 cyber attacks, 1 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.
Hidroelectrica cyber incidents detection timeline including parent company and subsidiaries

Hidroelectrica este principalul producător de energie electrică din România, un jucător important în domeniul hidroenergetic în Europa și principalul furnizor de servicii de sistem din România, având un rol important pentru securitatea SEN. Societatea deține și exploatează 182 de centrale hidroelectrice, 5 stații de pompare, un parc eolian cu o putere instalată totală de 108 MW și are o capacitate totală instalată de producere a energiei hidroelectrice de 6,3 GW. Societatea are șapte sucursale hidroelectrice și o sucursală ce administrează parcul eolian Crucea, Porțile de Fier și Vâlcea fiind cele mai importante din punct de vedere al capacităților acestora de producție a energiei și ponderilor în producția de energie totală a Grupului. Societatea s-a angajat să producă energie 100% din surse regenerabile și a jucat, încă de la început, un rol esențial în proiectarea și crearea de concepte tehnologice și operaționale care au devenit standardul în sectorul sau de activitate. Totodată, Hidroelectrica este vânzător angro, precum și furnizor de energie electrică direct către clienții finali, clienți casnici (rezidențiali) și noncasnici (incluzând afaceri din diverse sectoare industriale, cum ar fi construcția de automobile, telecomunicații și construcții etc). Ca producător de energie din sursă hidro și, mai recent, din sursă eoliană, societatea valorifică sinergiile existente între portofoliul de producție și cel de furnizare, dar și cele generate prin diversificarea portofoliului de producție către alte surse regenerabile, cum ar fi energia eoliană și solară prin mixarea acestora cu sursa hidro. Începând cu data de 12 iulie 2023, societatea este listată la Bursa de Valori București, la sfârșitul lunii octombrie 2023, Hidroelectrica ocupând locul 1 în top tranzacționare la BVB, cu o valoare de 2,8 miliarde RON.

The Saudi Electricity Company was established on the 5th of April in the year 2000, incorporated in accordance with Council of Ministers Mandate No. 169 dated November 30th, 1998, the Saudi Electricity Company was born out of the merger of smaller regional power company in the central, eastern, west
NTPC Limited is India’s largest power generation utility with roots planted way back in 1975 to accelerate power development in India. Since then it has established itself as the dominant power major with a presence in the entire value chain of the power generation business. From fossil fuels, it ha
ACCIONA champions a different way of doing business: Business as Unusual, delivering benefits far beyond the corporate realm. Driven by the ambition to leave a positive legacy for society and design a better planet, we lead in developing solutions in renewable energy, sustainable water management,

Exelon Corporation (Nasdaq: EXC) is the nation’s largest utility company, serving more than 10 million customers through six fully regulated utilities. We believe that reliable and affordable energy is essential to a brighter, more sustainable future. We are a FORTUNE 250 company operating across

Hitachi Energy is a global technology leader in electrification, powering a sustainable energy future with innovative power grid technologies with digital at the core. Over three billion people depend on our technologies to power their daily lives. With over a century in pioneering mission-critical

The Government of West Bengal has restructured the erstwhile WBSEB into two successor entities, namely West Bengal State Electricity Distribution Company Limited (WBSEDCL) and West Bengal State Electricity Transmission Company Limited (WBSETCL), under the ownership of the State Government. The two C

Pacific Gas and Electric Company, incorporated in California in 1905, is one of the largest combination natural gas and electric utilities in the United States. Based in San Francisco, the company is a subsidiary of PG&E Corporation. There are approximately 20,000 employees who carry out Pacific

Joint stock company Elektroprivreda Srbije as the largest company in Serbia represents economic and energy backbone of the country. The main activities of EPS AD are the production, supply and trade of electricity. EPS is owner a the coal mines, thermopower plant and hydropower plant. EPS supplies e

Adani Group is a diversified organisation in India comprising 10 publicly traded companies. It has created a world class transport and utility infrastructure portfolio that has a pan-India presence. Adani Group is headquartered in Ahmedabad, in the state of Gujarat, India. Over the years, Adani Grou
.png)
“Digitalization is very important for Hidroelectrica. We have many projects related to improving the customer experience.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Hidroelectrica is https://www.hidroelectrica.ro/.
According to Rankiteo, Hidroelectrica’s AI-generated cybersecurity score is 708, reflecting their Moderate security posture.
According to Rankiteo, Hidroelectrica currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Hidroelectrica is not certified under SOC 2 Type 1.
According to Rankiteo, Hidroelectrica does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Hidroelectrica is not listed as GDPR compliant.
According to Rankiteo, Hidroelectrica does not currently maintain PCI DSS compliance.
According to Rankiteo, Hidroelectrica is not compliant with HIPAA regulations.
According to Rankiteo,Hidroelectrica is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Hidroelectrica operates primarily in the Utilities industry.
Hidroelectrica employs approximately 615 people worldwide.
Hidroelectrica presently has no subsidiaries across any sectors.
Hidroelectrica’s official LinkedIn profile has approximately 11,802 followers.
Hidroelectrica is classified under the NAICS code 22, which corresponds to Utilities.
No, Hidroelectrica does not have a profile on Crunchbase.
Yes, Hidroelectrica maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hidroelectrica-s-a.
As of December 29, 2025, Rankiteo reports that Hidroelectrica has experienced 1 cybersecurity incidents.
Hidroelectrica has an estimated 4,205 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.
Detection and Response: The company detects and responds to cybersecurity incidents through an incident response plan activated with yes, and law enforcement notified with yes, and containment measures with it teams started rebuilding affected systems on new infrastructure using backups, and remediation measures with rebuilding affected systems on new infrastructure, and recovery measures with using existing backups, and communication strategy with public disclosure of incident details..
Title: Ransomware Attack on Oltenia Energy Complex
Description: A ransomware attack hit Oltenia Energy Complex (Complexul Energetic Oltenia), Romania's largest coal-based energy producer, on the second day of Christmas, taking down its IT infrastructure. Several computer applications became temporarily unavailable, including ERP systems, document management applications, the company's email service, and website. The company's activity was partially affected without jeopardizing the operation of the National Energy System.
Date Detected: 2023-12-26
Type: Ransomware
Attack Vector: Compromised credentials and Internet-exposed services
Threat Actor: Gentlemen ransomware operation
Motivation: Financial gain
Common Attack Types: The most common types of attacks the company has faced is Ransomware.
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Compromised credentials and Internet-exposed services.

Data Compromised: Documents and files encrypted
Systems Affected: ERP systems, document management applications, email service, website
Operational Impact: Partially affected, but National Energy System operation not jeopardized
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Documents and files.

Entity Name: Oltenia Energy Complex (Complexul Energetic Oltenia)
Entity Type: Energy Producer
Industry: Energy
Location: Romania
Size: 19,000+ employees

Incident Response Plan Activated: Yes
Law Enforcement Notified: Yes
Containment Measures: IT teams started rebuilding affected systems on new infrastructure using backups
Remediation Measures: Rebuilding affected systems on new infrastructure
Recovery Measures: Using existing backups
Communication Strategy: Public disclosure of incident details
Incident Response Plan: The company's incident response plan is described as Yes.

Type of Data Compromised: Documents and files
Data Exfiltration: Under assessment
Data Encryption: Yes (.7mtzhh file extension)
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Rebuilding affected systems on new infrastructure.
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by it teams started rebuilding affected systems on new infrastructure using backups.

Ransomware Strain: Gentlemen
Data Encryption: Yes
Data Exfiltration: Under assessment
Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Using existing backups.

Legal Actions: Criminal complaint filed with DIICOT
Regulatory Notifications: Reported to National Cyber Security Directorate, Ministry of Energy, and other relevant authorities
Ensuring Regulatory Compliance: The company ensures compliance with regulatory requirements through Criminal complaint filed with DIICOT.

Source: Trend Micro
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Trend Micro.

Investigation Status: Ongoing
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Public disclosure of incident details.

Entry Point: Compromised credentials and Internet-exposed services
Last Attacking Group: The attacking group in the last incident was an Gentlemen ransomware operation.
Most Recent Incident Detected: The most recent incident detected was on 2023-12-26.
Most Significant Data Compromised: The most significant data compromised in an incident was Documents and files encrypted.
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was IT teams started rebuilding affected systems on new infrastructure using backups.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach was Documents and files encrypted.
Most Significant Legal Action: The most significant legal action taken for a regulatory violation was Criminal complaint filed with DIICOT.
Most Recent Source: The most recent source of information about an incident is Trend Micro.
Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing.
Most Recent Entry Point: The most recent entry point used by an initial access broker was an Compromised credentials and Internet-exposed services.
.png)
A vulnerability was found in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/PPTPUserSetting. Performing manipulation of the argument delno results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
A vulnerability has been found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
A flaw has been found in omec-project UPF up to 2.1.3-dev. This affects the function handleSessionEstablishmentRequest of the file /pfcpiface/pfcpiface/messages_session.go of the component PFCP Session Establishment Request Handler. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was detected in floooh sokol up to 16cbcc864012898793cd2bc57f802499a264ea40. The impacted element is the function _sg_pipeline_desc_defaults in the library sokol_gfx.h. The manipulation results in stack-based buffer overflow. The attack requires a local approach. The exploit is now public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is identified as 5d11344150973f15e16d3ec4ee7550a73fb995e0. It is advisable to implement a patch to correct this issue.
A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.