Ukrenergo

The organisation is known as the Energy Company of Ukraine, also operating under the names Ukrainian Power Corporation and Ukrenergo. Its headquarters is located in Ukraine. It functions as a state power distributor within the national energy sector. Core operational assets include high‑voltage electrical substations and power distribution stations. These assets are responsible for the transmission and distribution of electricity to various consumers across the country.

As a critical infrastructure provider, the organisation supports essential services for industry, commerce, and residential users in Ukraine. Specific quantitative details such as customer count, generation capacity, or geographic coverage are not disclosed in the available sources. The organisation’s infrastructure has been the focus of multiple cyber‑operations aimed at disrupting power supply and erasing forensic evidence. These operations have demonstrated both the strategic value of the grid and the persistent threat landscape it faces.

On 8 April 2022, a Russian‑sponsored group called Sandworm attempted to compromise the organisation by deploying the Industroyer2 malware tailored to high‑voltage substations. The same attack employed data‑wiping tools – CaddyWiper on Windows and OrcShred, Soloshred, and AwfulShred on Linux and Solaris systems – alongside PowerGap PowerShell scripts and Impacket for lateral movement. Despite weeks of preparation and high configurability, the intrusion failed to achieve its objective of causing a widespread outage. On 27 June 2017, the Petrwrap ransomware variant was used against the organisation and other Ukrainian critical‑infrastructure entities, demanding $300 in Bitcoin to restore access. That incident disrupted government systems, financial services, airport operations, and retail payment systems, although power supplies remained unaffected. On 11 December 2016, an unexpected outage at a power distribution station near Kiev resulted in the loss of approximately 200 megawatts of capacity. Investigators observed anomalous transmission data inconsistent with standard protocols, indicating external interference as the likely cause.

The organisation’s status as a state power distributor indicates that it is owned and overseen by the Ukrainian government. No information regarding parent companies, subsidiaries, or ownership stakes beyond this state affiliation is provided in the source material. Consequently, any details about corporate structure or equity holdings remain undetermined based on the available evidence.