Romanian energy provider hit by Gentlemen ransomware attack

A ransomware attack on Romania's Oltenia Energy Complex on December 26 disrupted several IT systems (ERP, document management, email, website) and encrypted files; the company is restoring systems from backups, investigating possible data exfiltration, and has notified authorities. The Gentlemen ransomware group is suspected — it is known to use compromised credentials, target Internet-exposed services, leave README-GENTLEMEN.txt notes, and append a .7mtzhh extension. Impact was partial and did not threaten national energy operations, but the victim is a major electricity producer representing roughly 30% of Romania's generation capacity.