Colombia
COL
EPM cyberattack disrupts customer channels and prepay energy services in Colombia
Empresas Públicas de Medellín (EPM) reported a significant cyber incident in mid-December 2022 that led it to contain and recover affected IT systems. The event disrupted customer service channels and impacted prepaid energy and water recharge/payment processes, which EPM partially restored via alternative operators while investigations proceeded.
55
Estimated severity
55 / 100
83
Source reliability
83 / 100
Approximate Date
11/12/2022
Targeted Company
EPM
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Colombia
Affected countries
Colombia
Impacted regions
Latin America · NO_INFORMATION
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service unavailabilityDownstream customer disruptionOrder processing disruptionERP or business system disruption
Affected sectors
Energy & Utilities
Affected departments
Customer ServiceInformation TechnologyAccounting
Attack Profile
Attack types
Ransomware
Attributed threat actors
No information
Sources
Incident Sources
epm.com.cohttps://www.epm.com.co/institucional/sala-de-prensa/noticias-y-novedades/epm-se-permite-informar-en-relacion-con-el-incidente-de-ciberseguridadeltiempo.comhttps://www.eltiempo.com/colombia/medellin/medellin-la-gravedad-y-riesgos-del-ciberataque-que-sufrio-epm-729517ventasdeseguridad.comhttps://www.ventasdeseguridad.com/novedades/ultimas-noticias/21-empresas/22909-empresa-de-servicios-publicos-suspende-canales-de-atencion-por-ciberataque.htmlvaloraanalitik.comhttps://www.valoraanalitik.com/ciberataque-a-epm-que-ha-pasado-con-las-investigaciones-y-soluciones