Sunday, December 25, 2011

Water Utility System Was Breached in a Cyber Attack

By Oliver David


It is been reported in recent days that a team of hackers breached the Springfield, Illinois water utility system targeting the system and destroying a water pump. The breach was discovered when a utility worker noticed an issue using the Supervisory Control and Data Acquisition System (SCADA). The issue was causing the utility’s water pump to burn out following being continuously turned off and on. This hack attack was confirmed by the U.S. Department of Homeland Security’s Industrial Control System Cyber Emergency Response Team soon following the staff member reported the issue.

Also verifying the attack was the Illinois Statewide Terrorism and Intelligence Center that published a report about a Public Water District Cyber intrusion. This report indicated that the hackers may have had access towards the system for as much as three months before it being found.

The hackers used a Russian IP address to hack into the software vendor’s database of usernames and passwords. It then used the stolen credentials to remotely access the SCADA system’s network. The software vendors keep customer records for maintenance and upgrades to the systems.

Operators with the water system had noticed what was termed as “glitches” a number of months before the discovery. They didn’t give these problems a lot heed and figured it was because of the overall instability with the system. It wasn’t till the SCADA system really turned on and off that they realized some thing wasn’t correct.

The software vendor is situated within the United States with numerous other utility business clients. There's a concern that you will find other systems at danger. Critics have known as out this lack of security and also the reality that numerous other important resources which includes nuclear facilities might be vulnerable. Hardware authentication is often a great way to secure data.

Soon after, the Illinois Statewide Terrorism and Intelligence Center, with the US Department of Homeland Security and the FBI issued a follow up report. DHS spokesperson Peter Boogaard stated ”there is no credible corroborated data that indicates a risk to critical infrastructure entities or a threat to public safety.”




About the Author:



No comments: