Konke esikwaziyo ngokuhlaselwa kwe-inthanethi e-Endesa nase-Energía XXI

Okwakamuva Ukuhlaselwa kwe-cyber ngokumelene ne-Endesa kanye nomhlinzeki wayo wamandla olawulwayo i-Energía XXI Lokhu kuphakamise ukukhathazeka mayelana nokuvikelwa kwedatha yomuntu siqu emkhakheni wezamandla. Le nkampani ivumile ukuthi ukufinyelela okungagunyaziwe epulatifomu yayo yezentengiselwano eye yadalula ulwazi oluyimfihlo lwezigidi zabasebenzisi eSpain.

Ngokusho kwezitatimende zenkampani kulabo abathintekile, lesi sigameko sivumele umhlaseli ukuthi khipha idatha ehlobene nezinkontileka zikagesi negesikufaka phakathi ulwazi lokuxhumana, amadokhumenti omazisi, kanye nemininingwane yasebhange. Nakuba ukunikezwa kukagesi negesi kungaphazamisekanga, ubukhulu bokwephulwa kwesivumelwano kwenza kube esinye seziqephu ezibucayi kakhulu eminyakeni yamuva nje emkhakheni wezamandla waseYurophu.

Indlela ukuhlaselwa kwepulatifomu ye-Endesa okwenzeke ngayo

Le nkampani kagesi ichaze ukuthi umlingisi ononya ikwazile ukunqoba izinyathelo zokuphepha ezisetshenzisiwe epulatifomu yabo yezentengiselwano kanye nokufinyelela izizindalwazi eziqukethe ulwazi lwamakhasimende kokubili okuvela e-Endesa Energía (imakethe ekhululekile) kanye nase-Energía XXI (imakethe elawulwayo). Kubikwa ukuthi lesi sigameko senzeke ekupheleni kukaDisemba futhi Kwavela lapho imininingwane yalokhu kuphanga okusolwa ukuthi kubangelwa yicala iqala ukusabalala ezinkundleni zokuxhumana ezimnyama..

I-Endesa ichaza okwenzekile njenge- "ukufinyelela okungagunyaziwe nokungemthetho" ngaphandle kwezinhlelo zayo zezentengiselwano. Ngokusekelwe ekuhlaziyweni kwangaphakathi kokuqala, inkampani iphetha ngokuthi umhlaseli ngabe babenokufinyelela futhi ngabe baphume amabhlogo ahlukene olwazi oluhlobene nezinkontileka zamandla, yize igcizelela ukuthi iziqinisekiso zokungena ngemvume abasebenzisi bahlale bephephile.

Ngokusho kwemithombo yenkampani, ukuhlaselwa kwe-cyber kwenzeke naphezu kwezinyathelo zokuphepha eseziqalisiwe kakade futhi kuphoqe ukuthi kubuyekezwe ngokuphelele izinqubo zobuchwepheshe nezenhlanganoNgesikhathi esifanayo, uphenyo lwangaphakathi luqaliswe ngokubambisana nabahlinzeki bayo bezobuchwepheshe ukuze kwakhiwe kabusha ngokuningiliziwe ukuthi lokhu kungena kwenzeke kanjani.

Nakuba lolo phenyo luqhubeka, i-Endesa igcizelela ukuthi Izinsizakalo zabo zezentengiselwano ziyaqhubeka nokusebenza ngokujwayelekileNakuba ukufinyelela okuthile komsebenzisi kuvinjelwe njengendlela yokuvimbela, okubaluleke kakhulu kulezi zinsuku ezimbalwa zokuqala kube ukuhlonza amakhasimende athintekile nokuwazisa ngokuqondile ngokwenzekile.

Yimiphi idatha eye yaphazamiseka ekuhlaselweni kwe-cyber

Imininingwane yokuxhumana yenkampani umhlaseli akwazile ukuyifinyelela ulwazi lomuntu siqu oluyisisekelo kanye nolwazi lokuxhumana (igama, isibongo, izinombolo zocingo, amakheli eposi kanye namakheli e-imeyili), kanye nolwazi oluhlobene nezinkontileka zikagesi kanye nogesi.

Ulwazi olungase luvuze luhlanganisa futhi amadokhumenti omazisi njenge-DNI (National Identity Document) futhi, kwezinye izimo, Amakhodi e-IBAN ama-akhawunti asebhange okuhlobene nezinkokhelo zebhili. Okusho ukuthi, akuyona nje idatha yokuphatha noma yezentengiselwano, kodwa futhi nolwazi lwezezimali olubucayi kakhulu.

Ngaphezu kwalokho, imithombo ehlukahlukene kanye nokuvuza okushicilelwe ezinkundleni ezikhethekile kusikisela ukuthi idatha esengozini izofaka phakathi ulwazi lwamandla nolwezobuchwepheshe ulwazi oluningiliziwe, njenge-CUPS (i-unique supply point identifier), umlando wokukhokha, izinkontileka zikagesi negesi ezisebenzayo, izehlakalo ezirekhodiwe, noma ulwazi lokulawula oluxhunywe kumaphrofayili athile amakhasimende.

Nokho, inkampani igcizelela ukuthi amaphasiwedi okufinyelela ezindaweni eziyimfihlo kusukela ku-Endesa Energía kanye ne-Energía XXI azizange zithinteke ngenxa yalesi sigameko. Lokhu kusho ukuthi, ngokomthetho, abahlaseli ngeke babe nezihluthulelo ezidingekayo zokufinyelela ngqo kuma-akhawunti amakhasimende aku-inthanethi, yize benedatha eyanele yokuzama ukubakhohlisa ngokukhwabanisa okwenziwe ngezifiso.

Ingxenye yamakhasimende angaphambilini enkampani useqalile nokuthola izaziso ukubaxwayisa ngokudalulwa kwedatha yabo okungenzeka, okubonisa ukuthi ukwephulwa kwemithetho kuthinta amarekhodi omlando hhayi nje izinkontileka ezisebenzayo njengamanje.

Inguqulo yomdubuli: ngaphezu kwe-1 TB kanye namarekhodi afinyelela ku-20 million

Ngenkathi u-Endesa ehlaziya ububanzi obuqondile besigameko, isigebengu se-inthanethi esizibiza ngecala lokuhlasela, sizibiza ngokuthi "ISpain" kuwebhu emnyamaUnikeze inguqulo yakhe yemicimbi ezinkundleni ezikhethekile. Ngokusho kwe-akhawunti yakhe, ukwazile ukufinyelela izinhlelo zenkampani okukhulunywa ngayo. ngaphezu kwamahora amabili bese ukhipha isizindalwazi ngefomethi ye-.sql enkulu kune-terabyte eyi-1.

Kulezo zinkundla, iSpain ithi ithole idatha evela ku- abantu ababalelwa ezigidini ezingama-20inani elingadlula kakhulu amakhasimende angaba yizigidi eziyishumi anawo i-Endesa Energía ne-Energía XXI eSpain. Ukuze afakazele ukuthi lokhu akuyona inkohliso, umhlaseli uze washicilela i- isampula yamarekhodi angaba yi-1.000 ngedatha yamakhasimende yangempela neqinisekisiwe.

Isigebengu se-inthanethi uqobo sixhumane nezikhungo zezindaba ezigxile ekuphepheni kwe-inthanethi. ukuhlinzeka ngolwazi oluthile oluvela ezintathelini ezazinezinkontileka ne-Endesa ukusekela ubuqiniso bokuvuza. Lezi ziteshi zezindaba ziqinisekisile ukuthi idatha enikeziwe ihambisana nezinkontileka zakamuva zokuphakelwa kwasekhaya.

ISpain iqinisekisa ukuthi, okwamanje, akakayithengisi i-database kubantu besithathuNakuba evuma ukuthi uthole iziphakamiso ezifika ku-$250.000 cishe ngengxenye yolwazi olubiwe, uyaqhubeka emilayezweni yakhe ukuthi ukhetha ukuxoxisana ngqo nenkampani kagesi ngaphambi kokuphothula noma yiziphi izivumelwano nabanye abantu abanentshisekelo.

Kwezinye zalezo zingxoxo, umgebengu ugxeka inkampani ngokungaphenduli kwayo, ethi "Abakaze bangithinte; abanandaba namakhasimende abo." futhi besongela ukukhulula ulwazi olwengeziwe uma bengatholi mpendulo. I-Endesa, ngakolunye uhlangothi, igcina ukuma komphakathi okuqaphile futhi ikhawulela ekuqinisekiseni lesi sigameko, ngaphandle kokuphawula ngalokho okushiwo umhlaseli.

Ukuphanga okungenzeka kanye nokuxoxisana nenkampani

Lapho ukwephulwa kwezokuphepha sekumenyezelwe obala, isimo sesiphenduke saba ukuzama ukucindezela inkampaniLesi sigebengu se-inthanethi sithi sithumele ama-imeyili emakhelini amaningana ezinkampani zase-Endesa sizama ukuqala izingxoxo, kulokho okufana ne- isu lokuphanga ngaphandle kwesihlengo esibekiwe ekuqaleni.

Njengoba iSpain uqobo ichazele ezinye iziteshi zabezindaba, inhloso yakhe kungaba vumelana ne-Endesa ngenani lezimali kanye nesikhathi esinqunyiwe ngokushintshana nokungathengisi noma ukusabalalisa isizindalwazi esebiwe. Okwamanje, uthi akakadalulanga obala inani elithile futhi ulinde impendulo evela enkampanini yamandla.

Okwamanje, umhlaseli uphikelela ngokuthi uma ehluleka ukufinyelela kunoma yiluphi uhlobo lwesivumelwano, uzophoqeleka ukuthi yamukela okunikezwayo okuvela kubantu besithathu ababonise intshisekelo yokuthola idatha. Leli qhinga lihambisana nephethini evamile kakhulu ebugebengwini be-inthanethi, lapho ukwebiwa kwedatha yomuntu siqu neyezezimali kusetshenziswa njengesizathu sokucindezela izinkampani ezinkulu.

Ngokombono wezomthetho nowokulawula, noma yiziphi izinkokhelo zesihlengo noma izivumelwano eziyimfihlo Kuvula isimo esiyinkimbinkimbi sokuziphatha kanye nesomthetho.Ngakho-ke, izinkampani zivame ukugwema ukuphawula ngalezi zinhlobo zokuxhumana. Kulokhu, i-Endesa imane yaphinda yathi iyabambisana neziphathimandla ezifanele nokuthi okubaluleke kakhulu kuyo ukuvikela amakhasimende ayo.

Okwamanje, amabutho ezokuphepha aseqalile landelela umsebenzi womhlaseli kuwebhu emnyama Iziphathimandla sezivele ziqoqa ubufakazi bokuthi uzomthola. Eminye imithombo iphakamisa ukuthi lokhu kuhlasela kungenzeka ukuthi kwaqala eSpain, yize kungekho siqinisekiso esisemthethweni okwamanje mayelana nokuthi ungubani ngempela iSpain.

Impendulo esemthethweni evela ku-Endesa kanye nezinyathelo ezithathwe yiziphathimandla

Ngemva kwezinsuku eziningana zokuqagela kanye nokuthunyelwe ezinkundleni zokuxhumana eziyimfihlo, i-Endesa isiqalile thumela ama-imeyili kumakhasimende angaba nomthelela echaza okwenzekile futhi enikeza izincomo eziyisisekelo zokuvikela. Kule miyalezo, inkampani iyavuma ukuthi ayinawo ukufinyelela okungagunyaziwe futhi ichaza kafushane uhlobo lwedatha ebekwe engcupheni.

Le nkampani ithi, ngokushesha nje lapho lesi sigameko sitholakala, isebenze izinqubo zayo zokuphepha zangaphakathiLe nkampani ivimbe iziqinisekiso ezibekwe engcupheni futhi yasebenzisa izinyathelo zobuchwepheshe zokunqanda ukuhlaselwa, ukunciphisa imiphumela yako, nokuzama ukuvimbela isigameko esifanayo ukuthi singaphinde senzeke. Phakathi kwezinye izenzo, iqhuba ukuqapha okukhethekile kokufinyelela ezinhlelweni zayo ukuze ithole noma yikuphi ukuziphatha okungajwayelekile.

Ngokuhambisana nemithetho yokuvikela idatha yaseYurophu, i-Endesa ibike ukwephulwa kwemithetho ku- I-Spanish Agency for Data Protection (AEPD) futhi I-National Cybersecurity Institute (INCIBE)Amabutho Ezokuphepha Kahulumeni kanye nama-Corps nawo azisiwe futhi avule izinqubo zokuphenya ngalezi zenzakalo.

Le nkampani igcizelela ukuthi isebenza ngokubambisana “Ukucaca” kanye nokubambisana neziphathimandlaFuthi khumbula ukuthi isibopho sesaziso sifinyelela kokubili kubalawuli nakubasebenzisi ngokwabo, abaziswa ngezigaba njengoba ububanzi obuqondile bokuvuza bucaca.

Izinhlangano zabathengi ezifana neFacua zicele i-AEPD ukuthi vula uphenyo olunzulu Uphenyo luhlose ukuthola ukuthi inkampani kagesi yayinezinyathelo zokuphepha ezanele yini nokuthi ukuphathwa kokwephulwa komthetho kwenziwa yini ngokuvumelana nemithetho. Ukugxila, phakathi kwezinye izici, isivinini sempendulo, ukuvikelwa kwangaphambilini kwezinhlelo, kanye nezinyathelo ezizosetshenziswa esikhathini esizayo ukunciphisa izingozi.

Izingozi zangempela kumakhasimende: ukwebiwa kobunikazi kanye nokukhwabanisa

Nakuba i-Endesa igcizelela ezitatimendeni zayo ukuthi iyakubheka "akunakwenzeka" ukuthi lesi sigameko sizoholela ekulimaleni okuyingozi kakhulu Ngokuphathelene namalungelo nenkululeko yamakhasimende, ochwepheshe bezokuphepha kwe-inthanethi baxwayisa ngokuthi ukudalula lolu hlobo lolwazi kuvula ithuba lezimo eziningi zokukhwabanisa.

Ngolwazi olufana negama eligcwele, inombolo kamazisi, ikheli kanye ne-IBAN, Izigebengu ze-inthanethi zingazenza umuntu ongeyena. kwezisulu ezinezinga eliphezulu lokungenzeka. Lokhu kubavumela, isibonelo, ukuthi bazame ukuthola inkontileka yemikhiqizo yezezimali egameni labo, bashintshe imininingwane yokuxhumana kwezinye izinsizakalo, noma baqalise izicelo kanye nezinqubo zokuphatha bezenza abanikazi abasemthethweni.

Enye ingozi esobala ukuthi ukusetshenziswa okukhulu kolwazi lwemikhankaso yobugebengu bokweba imininingwane ebucayi kanye nogaxekileAbahlaseli bangathumela ama-imeyili, imiyalezo ye-SMS, noma benze izingcingo ezizenza i-Endesa, amabhange, noma ezinye izinkampani, okuhlanganisa nedatha yangempela yamakhasimende ukuze bathole ukwethenjwa kwabo futhi babakholise ukuthi banikeze ulwazi olwengeziwe noma benze izinkokhelo eziphuthumayo.

Inkampani yezokuphepha i-ESET igcizelela ukuthi Ingozi ayipheli ngosuku okubikwa ngalo ukwephulwa kwemithethoUlwazi olutholakale ekuhlaselweni okunjengalokhu lungasetshenziswa kabusha izinyanga noma ngisho neminyaka, luhlanganiswe nolunye ulwazi olubiwe ezigamekweni zangaphambilini ukuze kwakhiwe ukukhwabanisa okuyinkimbinkimbi futhi okunzima ukukubona. Ukuze uqonde imiphumela yobuchwepheshe yokutheleleka okukhulu, kuyasiza ukubukeza ukuthi kwenzekani uma umshini usengozini enkulu: Kwenzekani uma ikhompyutha yami itheleleke nge-malware?.

Yingakho iziphathimandla nochwepheshe begcizelela ukubaluleka gcina isimo sengqondo sokuqapha esikhathini esimaphakathi nesidengokubukeza njalo ukuthengiselana kwebhange, izaziso ezingavamile kanye nanoma yikuphi ukuxhumana okubonakala kusolisa kancane, noma ngabe sekudlule isikhathi esithile kusukela kwenzeka lesi sigameko sokuqala.

Izincomo kulabo abathintekile ngokuhlaselwa kwe-Endesa

Izinhlangano ezikhethekile kanye nezinkampani zokuphepha kwe-inthanethi ngokwazo zisakaze uchungechunge lwe- izinyathelo ezisebenzayo zokunciphisa umthelela lolu hlobo lokwephulwa phakathi kwabasebenzisi. Isinyathelo sokuqala ukuqaphela noma yikuphi ukuxhumana okungalindelekile okubhekisela kulesi sigameko noma kudatha yomuntu siqu neyezezimali.

Uma uthola ama-imeyili, imiyalezo yombhalo, noma izingcingo ezibonakala sengathi zivela e-Endesa, ebhange, noma kwenye inhlangano, futhi lokho kufaka phakathi izixhumanisi, izinamathiselo, noma izicelo zedatha eziphuthumayoIsincomo ukuthi ungachofozi kunoma yiziphi izixhumanisi noma unikeze noma yiluphi ulwazi, futhi uma ungabaza, xhumana nenkampani ngqo ngeziteshi zayo ezisemthethweni. Kungcono ukuchitha imizuzu embalwa uqinisekisa ubuqiniso bomlayezo kunokuzifaka engcupheni yokuqolwa. Kulezi zimo, kuyasiza ukwazi ukuthi ungayivimba kanjani imithombo enobungozi: Indlela yokuvimba iwebhusayithi.

Nakuba i-Endesa iphikelela ngokuthi amaphasiwedi amakhasimende ayo Abazange babekwe engcupheni kulokhu kuhlaselaOchwepheshe bayeluleka ukuthi basebenzise leli thuba ukuvuselela amaphasiwedi okufinyelela ezinsizakalo ezibalulekile, futhi, noma nini lapho kungenzeka, bavule izinhlelo zokusebenza ukuqinisekiswa kwezinto ezimbiliLolu ngqimba olwengeziwe lokuphepha lwenza kube nzima kakhulu ngomhlaseli ukuthola ukufinyelela ku-akhawunti, noma ngabe ekwazile ukuthola iphasiwedi.

Kunconywa futhi hlola ama-akhawunti asebhange njalo kanye nezinye izinsizakalo zezezimali ezixhunywe kudatha ephumile, ukuthola ukuthengiselana okungagunyaziwe noma izindleko ezingavamile. Uma usola ukuthi ulwazi lunikezwe umuntu ongaba ngumkhohlisi, kungcono ukuthi wazise ibhange ngokushesha bese ufaka umbiko wamaphoyisa.

Izinsizakalo zamahhala ezifana Ingabe Ngibanjwe I-Pwned Zikuvumela ukuthi uhlole ukuthi ikheli le-imeyili noma olunye ulwazi luvele yini ekwephulweni kwedatha okwaziwayo. Nakuba zingakunikezi isivikelo esiphelele, ziyakusiza ukuthi uthole ukuqonda okucacile kokuchayeka kwakho futhi wenze izinqumo ezinolwazi mayelana nokushintsha iphasiwedi kanye nezinye izindlela zokuvimbela.

Imigqa yosizo neziteshi ezisemthethweni ziyatholakala

Ukuze kuxazululwe ukungabaza nokusabalalisa izehlakalo ezihlobene nokuhlaselwa kwe-inthanethi, i-Endesa ivumele imigqa yocingo ezinikele yokusizaAmakhasimende e-Endesa Energía angashayela inombolo yamahhala 800 760 366, kuyilapho abasebenzisi be-Energía XXI benayo 800 760 250 ukucela ulwazi noma ukubika noma yiziphi izinto ezingavamile abazitholayo.

Ekuxhumaneni okuthunyelwe, inkampani icela abasebenzisi ukuthi Naka ngokukhethekile noma yikuphi ukuxhumana okusolisayo ezinsukwini ezizayo futhi babike ngokushesha uma bethola imiyalezo noma izingcingo ezidala ukungathembani, kungaba ngala mafoni noma ngokuxhumana namaphoyisa.

Ngaphezu kweziteshi ze-Endesa, izakhamizi zingasebenzisa futhi Insizakalo yosizo ye-National Cybersecurity Institute, enenombolo yocingo yamahhala engu-017 kanye nenombolo ye-WhatsApp engu-900 116 117 ukuxazulula imibuzo ehlobene nokuphepha kwedijithali, ukukhwabanisa ku-inthanethi kanye nokuvikelwa kwedatha.

Lezi zinsiza zihloselwe abantu ngabanye, amabhizinisi, kanye nochwepheshe, futhi zivumela thola isiqondiso sochwepheshe mayelana nezinyathelo okufanele uzithathe uma usola ukuthi ube yisisulu sokukhwabanisa noma uma ufuna ukuqinisa ukuphepha kwama-akhawunti akho namadivayisi ngemva kokwephulwa kwedatha.

Izikhulu zomthetho zincoma ukuthi noma yikuphi ukuzama ukukhwabanisa okuhlobene nalesi sigameko kubikwe. faka isikhalazo esisemthethweni emaphoyiseni noma ku-Civil Guardukuhlinzeka ngama-imeyili, imiyalezo noma izithombe-skrini ezingasebenza njengobufakazi ophenyweni oluzayo.

Okunye ukuhlasela egagasini lezigameko ze-cyber ezibhekiswe ezinkampanini ezinkulu

Icala lase-Endesa liyanezela ku- umkhuba okhulayo wokuhlaselwa kwe-inthanethi ezinkampanini ezinkulu eSpain naseYurophu, ikakhulukazi emikhakheni yeqhinga njengamandla, ezokuthutha, ezezimali kanye nezokuxhumana. Ezinyangeni zakamuva, izinkampani ezifana I-Iberdrola, Iberia, Repsol noma i-Banco Santander Baye bahlupheka futhi izehlakalo eziye zabeka engcupheni idatha yezigidi zamakhasimende.

Lolu hlobo lokuhlasela lubonisa indlela amaqembu obugebengu ashintshe ngayo ekugxileni ezinhlosweni zezimali kuphela aya Gxila engqalasizinda ebalulekile kanye nezinkampani zamazwe ngamazwelapho inani lolwazi olubiwe kanye nekhono lokufaka ingcindezi ezinkampanini liphezulu kakhulu. Umgomo awusekho nje ukuthola inzuzo esheshayo, kodwa ukuthola idatha engasetshenziswa isikhathi eside.

Ezingeni laseYurophu, iziphathimandla bezilokhu zikhuthaza imithetho eqinile iminyaka eminingi, njenge- Umthethonqubo Wokuvikelwa Kwedatha Ojwayelekile (i-GDPR) noma isiqondiso se-NIS2 mayelana nokuphepha kwe-inthanethi, esidinga izinkampani ukuthi zithuthukise izinhlelo zazo zokuvikela futhi zibike ngokushesha noma yiziphi izehlakalo ezifanele.

Ukuvuza okubangelwe yi-Endesa kugqamisa ukuthi, naphezu kwalezi zinguquko zomthetho, Kusekhona igebe elikhulu phakathi kwezimfuneko zethiyori kanye neqiniso kwengqalasizinda eziningi zobuchwepheshe. Ubunzima bezinhlelo ezindala, ukuxhumana nabahlinzeki abaningi, kanye nenani elikhulayo ledatha kwenza lezi zinkampani zibe yizithako ezikhangayo kakhulu.

Kubasebenzisi, lesi simo sisho ukuthi siyisisekelo hlanganisa ukwethemba abahlinzeki bezinsizakalo nesimo sengqondo sokuzivikela esisebenzayoUkufunda ukubona izimpawu zesexwayiso nokusebenzisa iziqondiso eziyisisekelo zokuhlanzeka kwedijithali, njengokuphathwa kahle kwephasiwedi noma ukuqinisekiswa kokuxhumana okubucayi.

Ukuhlaselwa kwe-inthanethi e-Endesa nase-Energía XXI kubonisa izinga lapho ukwephulwa kwepulatifomu yezentengiselwano yenkampani enkulu kagesi kungenza khona ukudalula idatha yomuntu siqu neyezezimali yezigidi zabantu futhi kuholele emizamweni yokuphanga, ukwebiwa kobunikazi, kanye nokuhlaselwa kwe-phishing. Ngenkathi iziphathimandla ziphenya futhi inkampani iqinisa izinhlelo zayo, ukuzivikela okungcono kakhulu kwamakhasimende ukuhlala enolwazi, aqaphele kakhulu nganoma yimiphi imiyalezo esolisayo, futhi athembele eziteshini ezisemthethweni kanye nezincomo zochwepheshe bezokuphepha kwe-inthanethi.