In March, BEL's data systems were attacked by ransomware that originated in Russia. BEL immediately sprung into action to clean their systems of the ransomware and enhance security measures, but data - including customer information was compromised.
It's a major event for the country's electricity utility, but today the PUC's Director of Research and Development says the utility never even informed the regulator. Here's how Ambrose Tillett of the PUC told us they found out:
Ambrose Tillet, PUC, Director of Research and Development
"The PUC, the ministry actually was the agency that actually became aware, I mean apart from BEL of course, but outside of BEL, it was actually the ministry that became aware of the fact that the breach had occurred."
Reporter
"From the start at the beginning, right? Right."
Ambrose Tillet, PUC, Director of Research and Development
"So because BEL, when it happened, didn't provide any information and it was the ministry that alerted both the public and the PUC that this had happened and there has been some discussions between the government, the PUC and BEL to see how we can prevent these kinds of cyber attacks from being mitigated."
"And I believe BEL has been implementing the recommendations of a consultant that they got who made certain recommendations in terms of infrastructure and practices that they needed to change to harden their capability against cyber attacks."
"And our understanding is that BEL has implemented those recommendations, so that is the good news."
