GEBE

Summary

A utility company detected suspicious activity on two computer devices within its IT network, prompting precautionary measures including temporarily taking critical systems offline for assessment. The incident response involved a joint IT task force and external specialists, who confirmed no ransomware attack, data breach, or network compromise occurred. Normal operations resumed following thorough reviews, with no disruption to customer services. The organization emphasized continuous monitoring and ongoing efforts to restore systems affected by a prior cyberattack, prioritizing security across its core operational pillars. Management apologized for inconveniences caused by the precautionary actions while reaffirming commitments to service reliability and infrastructure protection.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On December 5, 2022, N.V. GEBE's Commercial Department identified suspicious activity involving two computer devices on the company’s information technology network. The ICT Department was promptly alerted, leading to the temporary shutdown of the affected computers, other critical systems, and the entire IT network as a precautionary measure. This action enabled a detailed review and assessment of the potential threat. Given N.V. GEBE’s critical role in national infrastructure, the Prime Minister of St. Maarten was immediately notified of the situation. A joint IT Task Force—comprising the company’s internal ICT team and its managed remote security monitoring provider—conducted analyses to evaluate the network’s integrity. They confirmed no evidence of a ransomware attack, data breach, or compromise to core IT infrastructure, business applications, or operational systems.

Following thorough reviews and consultations with external IT specialists, the network resumed normal operations. The company confirmed customer services remained unaffected throughout the incident. N.V. GEBE’s IT Task Force maintained continuous monitoring of the network and prioritized further system reviews to ensure ongoing security. Management acknowledged the precautionary measures may have caused inconvenience and apologized while emphasizing uninterrupted service delivery. The incident occurred amid ongoing efforts to restore IT systems damaged in a separate March 2022 cyberattack, with the Task Force concurrently focused on securing distribution, production, and commercial operations. N.V. GEBE committed to providing public updates via its official website and social media channels.

Sources

Sources available to members: 1 source.