Ransomware Attack on Romanian Waters Authority – 1,000+ IT Systems Compromised

On 20 December 2025 Romania’s National Administration "Apele Române" experienced a ransomware attack that impacted approximately 1,000 IT systems across the central agency and 10 of 11 regional water basins, affecting GIS, database, Windows hosts, email, web, and DNS servers; attackers leveraged BitLocker to lock files and issued a ransom demand, while operational technology controlling hydrotechnical structures remained operational and national cybersecurity authorities are leading the investigation and recovery efforts.