KISTERS Ransomware Attack

The attack became on the night of November 10th, the company announced: "As far as we know, the attackers gained access to the computer network via an orchestrated ransomware attack despite a strong security system," explained the management.

The software provider specializing in the energy industry therefore no longer has access to its own IT because it has shut down the system "to avert further damage". The extent of the damage is still unclear. At the moment, "no statements can be made about which data are affected by the attack," says managing director Klaus Kisters. Both the Federal Office for Information Security and the criminal police and a specialist team of data forensics have already started their investigations. In the recent past, the energy industry has been increasingly targeted by Cyber ​​criminals advised. Attacks on public utilities have already made headlines several times (energate reported).

Kisters is working on returning from crisis mode

The Kister employees are only active in crisis mode and can therefore only be reached via their mobile phones, not by e-mail or landline telephony. As soon as knowledge is available about which data is involved and when the company can return to normal operation, Kisters AG wants to "provide clear and open information", announced the management: "Now for us it is first about getting back to everything quickly We are working hard on that, "says Klaus Kisters. It will also be about learning from the incident and increasing cybersecurity for the future.