A ransomware group calling itself BlackCat says it has infiltrated the systems of a major European energy company and is threatening to release sensitive operational files unless it is paid. The claim, reported by Reuters, has not been independently verified.

If confirmed, the incident would add to growing concerns about the vulnerability of critical infrastructure to cyber extortion. Energy firms are frequent targets because disruptions can have wide-ranging effects, from business operations to public services.

The company involved has not publicly detailed the extent of any alleged breach. As with many ransomware incidents, the key questions are whether attackers truly accessed internal systems, what data may have been exposed, and whether any core operations were disrupted.

Cybersecurity analysts say such cases often unfold in stages, with threat actors using public pressure to force negotiations. For companies and regulators, the episode is another reminder that incident response planning, network segmentation, and data backups remain essential defenses against increasingly aggressive criminal groups.