Cyber Incident Victim: Eneo
Date:
Jan 2024
Location:
Cameroon
Summary
A cyber attack significantly disrupted Cameroon's power utility's computer systems, prompting precautionary deactivation of some applications and severely impacting prepaid and postpaid customer operations. The utility assured customers that prepaid services were partially restored through partner platforms within 48 hours while postpaid users would not face penalties or disconnections for late payments during the incident. System restoration efforts progressed gradually, though intermittent service slowness or unavailability persisted during recovery. The company apologized for inconveniences and advised vigilance against fraudulent token purchase schemes, emphasizing transactions through approved channels only.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On January 29, 2024, Eneo Cameroon, the national power utility, experienced a cyber attack that severely disrupted its computer systems. The incident significantly impaired operational capabilities, prompting the company to deactivate certain applications as a precautionary measure to secure its infrastructure. Prepaid and postpaid billing services were immediately impacted, hindering customers’ ability to conduct transactions. Eneo issued a public statement acknowledging the attack on the same day, advising customers to expect potential service unavailability or intermittent slowness due to ongoing remediation efforts. The utility apologized for the inconvenience and assured postpaid customers they would not face penalties for late payments or disconnections for unpaid bills during the disruption.
By February 2, 2024, Eneo reported progressive restoration of systems, with prepaid services partially restored within 48 hours through partnerships with Orange Cameroun and MTN Cameroon, enabling token purchases and activations. Postpaid operations remained under restoration, with the company maintaining its commitment to waive penalties and disconnections until full normalcy returned. Eneo’s specialized teams continued working to reinstate system integrity, advising customers to retry transactions periodically if encountering delays. The utility warned against fraudulent token purchase schemes, directing customers to use only approved channels like its call center (8010) or the #LiveChat on my.eneocameroon.com for assistance. Concurrently, Eneo encouraged energy-saving practices to reduce grid strain, emphasizing patience as agency transactions and partner services were gradually reinstated. Regular updates were promised to keep stakeholders informed of recovery progress.