https://www.tongapower.to/ Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Tonga Power Limited, the state-owned electricity utility serving Tonga, was listed on 21 August 2025 by the ransomware group known as incransom. Public reporting states that internal files were exfiltrated in a ransomware attack; the number of people affected remains unknown and further operational details have not been disclosed.

Because the company generates, distributes and sells power across Tongatapu, Vavaʻu, Haʻapai and ʻEua, any compromise of its systems carries potential consequences for customers, staff and the reliability of essential energy services in the kingdom.

Inside the incident

According to the available record, Tonga Power Limited appeared on the incransom leak site on 21 August 2025. The group claims that internal files were taken during a ransomware attack. No confirmed figures have been released for the volume of data, the precise date the intrusion began, the initial access method, or whether systems were encrypted. The number of individuals whose information may have been involved is listed as unknown. Public detail on the incident remains limited to the group’s claim of exfiltration and the organisation’s identification as the listed victim.

Inside incransom

Incransom is a ransomware operation that has been observed conducting double-extortion campaigns: encrypting systems and simultaneously removing copies of data, then threatening to publish the material if a ransom is not paid. Like other groups of this type, it typically posts victim names and sample files on a dedicated leak site to increase pressure. Public reporting on prior activity shows the group targeting organisations across multiple sectors and geographies, often focusing on entities that hold operational or customer records. In the present case the listing of Tonga Power Limited constitutes a claim by the group; independent confirmation of the full scope of the intrusion has not been published in the available facts.

About Tonga Power Limited

Tonga Power Limited was established in July 2008 as the concessionaire under Tonga’s electricity regulation regime. It generates, distributes and sells electricity to commercial and domestic customers on the main islands of Tongatapu, Vavaʻu, Haʻapai and ʻEua. As a state-owned enterprise its stated core purpose is to reduce the country’s vulnerability to oil-price shocks and to expand access to modern energy services in an environmentally sustainable and financially viable manner. Utilities of this kind routinely manage customer billing records, employee information, technical schematics, operational logs and communications with government stakeholders. A breach affecting such an organisation therefore touches both the commercial relationship with households and businesses and the continuity of critical national infrastructure.

What data was at risk

The facts state that internal files were exfiltrated in the ransomware attack. Exact file names, categories or volumes have not been disclosed. Organisations operating electricity networks typically hold customer account and billing data, employee personnel files, network diagrams, maintenance records and financial documents. Whether any of those categories were among the material claimed by incransom remains unconfirmed. Readers should treat the precise contents as unknown until official notification or further verified reporting appears.

Why it matters

For individuals, exposure of personal or billing information can lead to targeted phishing, identity misuse or unwanted contact. For the utility itself, loss of internal operational files can complicate recovery, raise regulatory and contractual questions, and temporarily affect confidence in service reliability. Because Tonga Power Limited supplies power across multiple islands, even limited disruption or the need to rebuild trust after a claimed data theft carries wider social and economic weight. The absence of confirmed numbers of affected people means the scale of personal impact cannot yet be quantified, but the nature of the claimed data—internal files—means both staff and customers have reason to remain alert.

Were you affected?

If you are a customer, employee or contractor of Tonga Power Limited, treat the listing as a signal to take basic protective steps while waiting for any official guidance the company may issue. Practical first actions include:

• Monitor bank and utility statements for unexpected charges or account changes.
• Be cautious of unsolicited emails or calls that reference electricity accounts or request personal details.
• Change passwords on any accounts that reuse credentials linked to your Tonga Power relationship, and enable multi-factor authentication where available.
• Request a free exposure scan of your email address against known breach data sets to see whether your information has already appeared in public dumps.

Public detail on this incident remains limited; any further confirmed information should come from Tonga Power Limited or competent authorities rather than from unverified third-party claims.

AICompiled with AI assistance from public sources and published under our editorial standards.