EirGrid Group

EirGrid, which provides electricity to homes and businesses across Ireland and Northern Ireland, reportedly suffered a security breach in August 2017.

According to a media report, during the attack on EirGrid's network, hackers gained access to the company's routers and set up a "virtual wire tap" man-in-the-middle on Vodafone's Direct Internet Access (DIA) service in Shotton, Wales.

As a result, messages transferred between the power provider's Welsh and Northern Irish companies were intercepted by the hackers.

The alert came soon after a secret warning from the FBI and US Department of Homeland Security to US firms, which warned that hackers were sending emails containing malicious Word documents to infect organisations with malware.

Source: https://www.bitdefender.com/blog/hotforsecurity/attack-on-irelands-state-owned-power-provider-blamed-on-state-sponsored-hackers

TPRM report: https://scoringcyber.rankiteo.com/company/eirgrid

"id": "eir192921122",
"linkid": "eirgrid",
"type": "Breach",
"date": "08/2017",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Energy',
                        'location': ['Ireland', 'Northern Ireland'],
                        'name': 'EirGrid',
                        'type': 'Power Provider'}],
 'attack_vector': ['Phishing', 'Man-in-the-Middle'],
 'date_detected': 'August 2017',
 'description': 'EirGrid, which provides electricity to homes and businesses '
                'across Ireland and Northern Ireland, reportedly suffered a '
                'security breach in August 2017. Hackers gained access to the '
                "company's routers and set up a 'virtual wire tap' "
                "man-in-the-middle on Vodafone's Direct Internet Access (DIA) "
                'service in Shotton, Wales. Messages transferred between the '
                "power provider's Welsh and Northern Irish companies were "
                'intercepted by the hackers.',
 'impact': {'systems_affected': ['Routers', 'Communication Systems']},
 'initial_access_broker': {'entry_point': 'Phishing email with malicious Word '
                                          'documents'},
 'references': [{'source': 'Media Report'}],
 'title': 'EirGrid Security Breach',
 'type': 'Security Breach',
 'vulnerability_exploited': 'Malicious Word documents'}