ENGlobal, a Houston-based contractor in the energy sector, was hit by a ransomware attack on November 25, 2024, disrupting its operations. The attack encrypted parts of the company’s data and forced them to take some IT systems offline to contain the damage. As of now, the full scope of the attack is unclear, including whether sensitive data was stolen.
ENGlobal is working with cybersecurity experts and has launched an internal investigation. However, the timeline for restoring full access to its systems is unknown, and the financial impact remains uncertain.
The attack highlights the ongoing cybersecurity risks faced by critical infrastructure companies, especially those in the energy and government sectors. While the specific ransomware strain hasn’t been identified, experts recommend regular software updates, strong data encryption, secure offline backups, and continuous employee training to prevent and mitigate such attacks.