WILLEMSTAD – Curaçao does not have a specific emergency plan for a major cyberattack on Aqualectra that simultaneously disrupts electricity and drinking water supplies, according to a study of the island’s ability to respond to major crises.
The finding is contained in research by crisis-management consultancy Crisisplan, which examined Curaçao’s preparedness for several large-scale emergencies, including a cyberattack on Aqualectra, extreme rainfall, a cruise ship accident and an aircraft disaster.
The study concludes that Curaçao is capable of handling a major emergency during its initial stages but could quickly encounter serious difficulties if a crisis continues for an extended period.
A cyberattack on Aqualectra is particularly significant because the utility is responsible for both electricity and drinking water production. A simultaneous disruption could therefore affect households, businesses, healthcare facilities and other essential services.
The Crisisplan study identifies fuel supplies, emergency shelter capacity, medical assistance and the availability of crisis-management personnel as other vulnerable areas during prolonged emergencies.
The warning comes as cybersecurity has already become a real operational issue for Aqualectra. The utility previously experienced a ransomware attack that affected internal systems and customer service, although electricity and water production were not disrupted by that incident.
Curaçao authorities and Aqualectra have also conducted crisis exercises involving threats to the water supply. Earlier this year, the Directorate for Risk Management and Disaster Policy, Aqualectra and the Crisis Response Board carried out an exercise simulating worsening water contamination.
Crisisplan recommends strengthening emergency provisions and creating a joint pool of crisis-management professionals who can be deployed when major incidents place prolonged pressure on the island’s regular response capacity.