US energy contractor ENGlobal struck by ransomware attack

ENGlobal Corporation, an energy and industrial service provider in the United States, has become the victim of a ransomware attack.

In an 8-K Filing addressed to the Securities and Exchange Commission (SEC), the company says employees became aware of a ‘cybersecurity incident’ on November 25.

Preliminary research showed that an unknown and unauthorized threat actor illegally accessed the company’s computer systems and encrypted some of its data files.

Upon discovery, the energy service provider immediately took steps to contain, assess and remediate the incident, including launching an internal investigation, enlisting external cybersecurity experts, and restricting access to its IT systems.

“As a result of these and other measures, and while the investigation and remediation efforts remain ongoing, access to the company’s IT system is limited to essential business operations,” the 8-K Filing says.

The company can’t say for sure at what time all systems will be fully restored. Furthermore, it hasn’t determined yet whether the event will have a material impact on the company’s financial results or operations.

As of writing, no ransomware groups have claimed responsibility for the attack.

ENGlobal is an energy and industrial service provider that provides engineering services and systems to the petroleum refining, petrochemical, pipeline, production, and process industries throughout the United States and internationally.

The Houston-based company provides services that include feasibility studies, design, procurement and construction management to the United States government and several Fortune 500 companies in the energy industry. ENGlobal supplies automation, control, and electrical power systems to clients.

In 2023, ENGlobal posted revenues of $39 million. According to the latest statistics, the company currently has 134 employees.