News from GGCS

---

DENA Data Breach

Posted: 1 March, 2024. Written by Jesse Scharf

GGCS is aware of a data breach at DENA (https://www.dena.de/en/home/who) who operate the German biogasregister (https://www.biogasregister.de/en/home/) along with a variety of other schemes and projects. 

Information about the cyber attack in November 2023 is here 
https://www.dena.de/en/newsroom/news/2023/cyberattack-on-dena/

A forma data security notice has now been published 
https://www.dena.de/en/newsroom/news/2023/data-security-notice/

More details are given here 
https://www.dena.de/en/newsroom/meldungen/2024/a-cybercriminal-group-publishes-stolen-data/

• GGCS note that the data breach was in DENAs systems and not of Renewable Energy Assurance Limited (GGCS Scheme Administrator)
• We are drawing attention to the breach because it may effect members who have exported RGGOs to the DENA biogasregister via the ERGaR CoO Scheme
• We note that RGGOs do not contain any personal information so there is no possibility that the personal information held by us has been exposed via DENA’s data breach
• The security features of the GGCS registration database are described here - https://www.greengas.org.uk/scheme/security
• We have considered the security features of the Grexel system (G-REX) as part of our tendering process and they are described here - https://grexel.com/g-rex/g-rex_security/