Cyber Incident Victim: Amg Energia
Date:
Dec 2020
Location:
Italy
Summary
A cyberattack targeted Amg Energia, disrupting internal operations by infiltrating the company's network with a virus that temporarily disabled operating systems and compromised some data. Restoration efforts were immediately initiated but required several days to complete. The company confirmed no data loss or theft occurred despite the compromise. Critical services, including gas distribution and public lighting maintenance, remained uninterrupted, though internal workflows experienced delays. The incident was reported to law enforcement authorities for investigation.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On December 11, 2020, Amg Energia, responsible for gas distribution networks and public lighting maintenance in Palermo, suffered a cyberattack disrupting its internal operations. The company confirmed a virus infiltrated its corporate network, rendering operating systems and certain data temporarily unusable. Immediate restoration efforts were launched to address compromised information systems, though full recovery was projected to require several days. Amg Energia emphasized no data theft or permanent loss occurred despite the system compromise. Internal workflows experienced significant slowdowns due to the malware's impact on critical infrastructure, though the company maintained public-facing services without interruption.
The attack exclusively affected internal administrative functions while gas distribution and lighting maintenance services remained fully operational throughout the incident. Amg Energia President Mario Butera activated all urgent measures to restore normal operations and formally reported the incident to Italy's Postal Police for investigation. The company publicly attributed the disruption to a malicious cyber event but did not specify the attack vector or perpetrator. Operational delays persisted during the restoration period, confined to non-customer-facing processes. Amg Energia issued assurances regarding service continuity while continuing recovery efforts on compromised internal systems.