The ransomware claim alleges that threat actor coinbasecartel targeted Solarpro Holding, a prominent EPC contractor in Bulgaria specializing in PV plant projects, deploying malicious encryption tools to compromise their systems. The incident highlights ongoing cybersecurity threats faced by energy sector companies in Bulgaria. #Bulgaria
Incident Details
- Victim: Solarpro Holding
- Country: BG
- Actor: coinbasecartel
- Source: http://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion/companies/solarpro
- Discovered: 2025-12-12 14:17:54.718729
- Published: 2025-12-12 14:17:43.790848
Information
- Solarpro Holding is a leading EPC contractor specializing in the design, construction, and integration of photovoltaic (PV) plants.
- The company has a portfolio of over 7 GW of installed capacity.
- The ransomware attack was carried out by the actor coinbasecartel.

Disclaimer: This post is based on public claims made by the ransomware group "coinbasecartel". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.