Romanian Waters confirms cyberattack, critical water operations unaffected

Romanian Waters confirms a ransomware cyber attack over the weekend, with authorities stressing that critical water operations were not affected. According to the National Cyber Security Directorate (DNSC), about 1,000 computer systems across the central organisation and 10 of its 11 regional offices were affected, disrupting IT assets such as GIS servers, databases, email and web services, Windows workstations, and domain name servers.

The press release published by DNSC notes that approximately 1,000 IT&C systems were compromised, but it emphasises that operational technology (OT) systems managing water infrastructure were not impacted and water operations continue to function normally.

The incident was reported to DNSC on 20 December 2025, amid assurances that the ransomware attack focused on workstations and servers within the National Romanian Waters Administration and several water basin administrations, including Oradea, Cluj, Iași, Siret and Buzău. Read more at Security Affairs.