As cited
Copy frozen at (site build).
ransomware
Resilience reports energy and utilities sector faces rising cyber exposure from ransomware, vulnerable OT systems
Resilience analyzed cyber insurance claims in the energy and utilities sector from January 2023 to September 2026, finding that email compromise accounts for 21% of claims but ransomware drives 70% of incurred losses despite representing only 9% of claims. Attackers bypassed existing security controls through social engineering and session hijacking, and the report notes that insurance data underestimates operational technology risk because intrusions into industrial control systems often go undetected. The firm recommends testing multifactor authentication (MFA) resilience, verifying backup recovery, checking for internet-exposed controllers, and assessing manual operational capability.
Why it matters: Energy and utilities sector practitioners must test their deployed MFA, backups, and network segmentation against real attack patterns documented in claims, because attackers are actively working around these controls and claims data misses undetected operational technology intrusions that could persist for months.
- Source published
- First seen by Cybersecurity Tracker