Cyber Incident Victim: British Virgin Islands Electricity Corporation
Date:
Aug 2024
Location:
British Virgin Islands
Summary
The British Virgin Islands Electricity Corporation experienced a cyberattack disrupting internal and external operations during ongoing power restoration efforts following Tropical Storm Ernesto. The corporation is collaborating with local and international experts alongside law enforcement to resolve the incident, prioritizing main feeder line repairs before addressing individual outages. While full restoration has been achieved in Virgin Gorda, work continues in other affected areas, with the public urged to remain patient amid compounded recovery challenges.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On August 19, 2024, the British Virgin Islands Electricity Corporation (BVIEC) publicly disclosed it had fallen victim to a cyberattack impacting both internal and external operational systems. The corporation did not specify the attack vector, duration, or threat actor involved but confirmed the incident disrupted normal business functions. BVIEC initiated a coordinated response with cybersecurity experts and law enforcement agencies in the British Virgin Islands and the United Kingdom to investigate the breach and restore systems. No evidence of customer data compromise was explicitly confirmed or denied in the announcement. The disclosure occurred while BVIEC crews were actively restoring power across the territory following Tropical Storm Ernesto, creating concurrent operational challenges.
The cyberattack compounded existing service disruptions caused by the storm, which had required prioritization of main feeder line repairs before addressing individual residential outages. BVIEC’s restoration efforts at the time of the announcement focused on the Great Mountain and Josiah’s Bay areas, with Virgin Gorda having achieved full power recovery post-storm. Public statements urged patience from residents still without electricity, citing unforeseen technical obstacles. Customer comments expressed concerns about payment system reliability and potential billing inaccuracies during the cyber incident, though BVIEC did not detail alternative payment protocols. The corporation maintained its primary focus on resolving both the cyberattack’s technical impacts and storm-related infrastructure repairs without providing specific timelines for full resolution. Operational transparency remained limited to generalized assurances about restoration progress and investigative collaboration.