EPCG and Montenegro Government: Montenegro's state infrastructure hit by cyber attack -officials

Montenegro Hit by Unprecedented Cyberattack Targeting Critical Infrastructure

Montenegro’s government digital infrastructure has come under an "unprecedented" and ongoing cyberattack, prompting warnings from authorities and international allies. The assault, which began on Thursday night (August 25, 2023), has raised concerns over potential disruptions to public utilities, transportation (including border crossings and airports), and telecommunications, according to a U.S. Embassy alert in Podgorica.

Key Details:

• Who: The attack targeted Montenegro’s state-owned systems, including the power utility EPCG, which shifted to manual operations as a precaution. The National Security Agency (ANB) described the incident as highly sophisticated.
• What: Authorities reported temporary service disruptions, though citizen and corporate data remained secure, per Public Administration Minister Maras Dukaj. Some non-critical services were deactivated to contain the threat.
• Why: Outgoing Prime Minister Dritan Abazovic suggested the attack was politically motivated, following his government’s collapse last week. Montenegro, a NATO member, has faced similar cyber threats in the past, including during its 2017 NATO accession and the 2016 elections.
• Response: The government convened an emergency National Security Council meeting on Friday. NATO acknowledged the attack, stating it was monitoring the situation and prepared to assist if requested. The U.S. Embassy advised citizens to limit travel and ensure documents were accessible.

Impact & Context:
The attack mirrors previous incidents in Montenegro, underscoring persistent cyber vulnerabilities in the region. While no immediate damage to critical data was reported, the disruption highlights risks to energy, transport, and digital governance sectors increasingly targeted by state-linked hackers. The timing, amid political instability, suggests a deliberate effort to destabilize the country’s infrastructure.

Source: https://www.reuters.com/world/europe/montenegros-state-infrastructure-hit-by-cyber-attack-officials-2022-08-26/

Elektroprivreda Crne Gore AD Nikšić cybersecurity rating report: https://www.rankiteo.com/company/elektroprivreda-crne-gore-ad-niksic

Ministry of Public Administration, Digital Society and Media of Montenegro cybersecurity rating report: https://www.rankiteo.com/company/montenegrodigital

"id": "ELEMON1780525915",
"linkid": "elektroprivreda-crne-gore-ad-niksic, montenegrodigital",
"type": "Cyber Attack",
"date": "8/2022",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'industry': 'Energy',
                        'location': 'Montenegro',
                        'name': 'EPCG (Power Utility)',
                        'type': 'State-owned'},
                       {'industry': 'Public Administration',
                        'location': 'Montenegro',
                        'name': 'Montenegro Government',
                        'type': 'Government'}],
 'customer_advisories': 'U.S. Embassy advised citizens to limit travel and '
                        'ensure document accessibility',
 'data_breach': {'personally_identifiable_information': 'Citizen and corporate '
                                                        'data remained secure'},
 'date_detected': '2023-08-25',
 'date_publicly_disclosed': '2023-08-25',
 'description': 'Montenegro’s government digital infrastructure has come under '
                "an 'unprecedented' and ongoing cyberattack, targeting public "
                'utilities, transportation (including border crossings and '
                'airports), and telecommunications. The attack began on '
                'Thursday night (August 25, 2023) and has raised concerns over '
                'potential disruptions to critical services.',
 'impact': {'operational_impact': 'Temporary service disruptions; non-critical '
                                  'services deactivated',
            'systems_affected': ['public utilities',
                                 'transportation',
                                 'telecommunications']},
 'investigation_status': 'Ongoing',
 'motivation': 'Politically motivated',
 'references': [{'source': 'U.S. Embassy in Podgorica'},
                {'source': 'Montenegro National Security Agency (ANB)'},
                {'source': 'Public Administration Minister Maras Dukaj'},
                {'source': 'NATO'}],
 'response': {'communication_strategy': 'U.S. Embassy alert; government '
                                        'advisories',
              'containment_measures': 'Non-critical services deactivated; '
                                      'manual operations for EPCG',
              'incident_response_plan_activated': 'National Security Council '
                                                  'meeting convened',
              'third_party_assistance': 'NATO monitoring and prepared to '
                                        'assist'},
 'stakeholder_advisories': 'NATO monitoring; U.S. Embassy travel advisory',
 'title': 'Montenegro Hit by Unprecedented Cyberattack Targeting Critical '
          'Infrastructure',
 'type': 'Cyberattack'}