LockBit ransomware gang targets electrical infrastructure organization in Montreal

The LockBit ransomware gang has once again caught the attention of cybersecurity experts and organizations worldwide through new attacks on the Commission des services électriques de Montréal (CSEM), a century-old municipal institution responsible for managing the extensive underground network of power and telecommunication cables spanning 770 kilometers within Montreal.

CSEM officially confirmed the cyberattack on Tuesday, disclosing that it had fallen victim to ransomware on August 3rd. The attack specifically targeted CSEM’s critical infrastructure.

The criminal group responsible for the attack made a portion of the stolen data public, which CSEM acknowledged. While condemning this illegal act, the organization emphasized that the exposed data poses minimal risks to public safety and operations.

Taking a firm stance, CSEM decided not to pay the ransom demanded by the hackers. Instead, the organization promptly engaged national authorities and law enforcement agencies in Quebec for assistance.

The LockBit gang openly claimed responsibility for the attack on Wednesday in a bold move. Additionally, they chose to publicize some of the stolen data through their dark web portal, providing a link to download approximately 44 gigabytes of the pilfered information, a detail confirmed by specialized sources.

To reassure the public, CSEM emphasized that the leaked data poses minimal risks, largely consisting of information already accessible. This transparency stems from the fact that all CSEM projects are subject to disclosure through official channels in Quebec.

CSEM has offered credit monitoring services to its employees via Equifax as part of its response strategy. The attack led to the theft of numerous documents outlining the intricate architecture of the network serving Montreal, including emergency services, Hydro-Québec, and Vidéotron.