Sargent & Lundy

Sargent & Lundy is a United States‑based engineering firm that focuses on critical infrastructure projects. The company provides engineering services that include the creation of model files and transmission data used for the design and operation of utility systems. Its client base spans the energy sector, encompassing electric power generation, transmission, and distribution facilities. In addition to commercial utility work, Sargent & Lundy undertakes nuclear security projects for various government agencies. The firm’s headquarters is located in the United States, though the specific city is not disclosed in the available sources.

Sargent & Lundy distinguishes itself through its specialized expertise in critical infrastructure and nuclear security engineering, positioning it as a contractor that supports both private utilities and government defense initiatives. This specialization places the firm within a supply chain where cybersecurity standards for contractors can differ from those applied to regulated utilities, a point highlighted by industry analysts. In October 2022 the firm experienced a ransomware attack attributed to the Black Basta group, which compromised sensitive data such as model files and transmission data used for utility designs. The incident was contained with minimal operational disruption, and there was no evidence that the stolen information was published on dark‑web platforms. Law enforcement was notified, although the company did not disclose details of any extortion demands, and security experts warned that the stolen schematics could potentially facilitate physical or cyberattacks on power facilities. The breach underscored broader supply‑chain risks, particularly given the firm’s involvement in nuclear security projects for government agencies.