Ukrainian power-grid attacks (Sandworm) (UKRENERGO-2015-2016)
OT disruption · disclosed 2015-12-23 · region: EU · primary attribution: Sandworm Team
Sectors touched: Utilities · Electric Power Generation, Transmission & Distribution
First publicly-confirmed cyberattack causing electrical blackout (Dec 2015: ~225k customers without power for hours in Ivano- Frankivsk oblast). Repeated December 2016 with the more advanced Industroyer/CrashOverride malware against Ukrenergo's 330kV Pivnichna substation in Kyiv. Industroyer2 deployed April 2022.
Named victims
- Ukrenergo
Linked sources
This canonical entry pulls together coverage from the other data layers — curated narrative above; raw sources below.
- MITRE campaign: 2015 Ukraine Electric Power Attack (C0028)