CSIDB logo
Incident

Amg Energia

Incident posture

Attack window
Dec 2020
Location
Italy
Status
Historical
CIA posture
Available to members
Updated
2025-12-13 00:00

Linked entities

Victim
Amg Energia
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Dec 2020
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A cyberattack targeted Amg Energia, disrupting internal operations by infiltrating the company's network with a virus that temporarily disabled operating systems and compromised some data. Restoration efforts were immediately initiated but required several days to complete. The company confirmed no data loss or theft occurred despite the compromise. Critical services, including gas distribution and public lighting maintenance, remained uninterrupted, though internal workflows experienced delays. The incident was reported to law enforcement authorities for investigation.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

On December 11, 2020, Amg Energia, responsible for gas distribution networks and public lighting maintenance in Palermo, suffered a cyberattack disrupting its internal operations. The company confirmed a virus infiltrated its corporate network, rendering operating systems and certain data temporarily unusable. Immediate restoration efforts were launched to address compromised information systems, though full recovery was projected to require several days. Amg Energia emphasized no data theft or permanent loss occurred despite the system compromise. Internal workflows experienced significant slowdowns due to the malware's impact on critical infrastructure, though the company maintained public-facing services without interruption.

The attack exclusively affected internal administrative functions while gas distribution and lighting maintenance services remained fully operational throughout the incident. Amg Energia President Mario Butera activated all urgent measures to restore normal operations and formally reported the incident to Italy's Postal Police for investigation. The company publicly attributed the disruption to a malicious cyber event but did not specify the attack vector or perpetrator. Operational delays persisted during the restoration period, confined to non-customer-facing processes. Amg Energia issued assurances regarding service continuity while continuing recovery efforts on compromised internal systems.

Sources

Sources available to members: 1 source.

CSIDB