Cyberattacks on US utilities surged 70% this year, says Check Point
By Seher Dareen and Vallari Srivastava
Sept 11 (Reuters) -U.S. utilities faced a near 70% jump in cyberattacks this year over the same period in 2023, according to data from Check Point Research, underlining the escalating threat to a critical infrastructure.
The utilities and power infrastructure across the U.S. are becoming increasingly vulnerable as the grid expands rapidly to meet surging demand for power and assets are digitalized.
Utilities are low-hanging fruit for cyberattacks because many of them use outdated software, said Douglas McKee of cyber security firm SonicWall.
To date, the attacks have not crippled any U.S. utility, but industry experts warn a coordinated attempt could be devastating, impacting essential services and causing substantial financial losses.
There were 1,162 cyberattacks on average through August this year, compared to 689 in 2023, Check Point data showed.
The energy sector is considered to be more vulnerable to such attacks. In May 2021, fuel pipeline operator Colonial Pipeline was forced to shut down its entire network due to one of the biggest cyberattack incidents on the energy industry.
More recently, U.S. oilfield services firm Halliburton HAL.N disclosed that an unauthorized third party had accessed and removed data from its systems.
The utilitiesindustry depends on IoT and ICS (Internet of Things and Incident Command System) technology, which are not as advanced in their cyber defenses as the software used by Apple AAPL.O or Microsoft MSFT.O, McKee said.
Compliance with regulations such as the North American Electric Reliability Corp's (NERC) Critical Infrastructure Protection, which safeguards bulk power systems from cyber threats, only provide a minimum standard or protection, experts said.
The expansion of the grid, including incremental interconnections to new customers like Gen-AI data centers, is creating more potential points of attack.
Earlier this year, NERC said the number of susceptible points on the U.S. electrical networks has been increasing by about 60 per day.
Several major U.S. companies have suffered ransomware attacks in recent years, including UnitedHealth Group's UNH.N Change Healthcare unit in February.
"If an equivalent attack occurred that was on the scale of Change Healthcare…the impact could be completely devastating," said Kevin Kirkwood, chief information security officer at Foster City, California-based cybersecurity provider Exabeam.
Even breaches that do not directly compromise critical infrastructure could lead to significant financial losses, said Wayne Tung, managing director at Sendero Consulting.
The average cost of a data breach in the energy sector reached a global high of $4.72 million, IBM reported in 2022.
Historically, election years also fuel heightened malicious cyber activity.
"With the upcoming U.S. election, we can expect a surge in cyberattacks on critical infrastructure, including utilities, energy grids, and communication networks," said Nataliia Zdrok, Senior Threat Intelligence Analyst at Binary Defense.
Average Weekly Cyber Attacks per Organization in U.S. https://reut.rs/3ATzUtA
Reporting by Seher Dareen and Vallari Srivastava in Bengaluru; writing by Mrinalika Roy; Editing by Sriraj Kalluvila
Mga Kaugnay na Asset
Pinakabagong Balita
Disclaimer: Ang mga kabilang sa XM Group ay nagbibigay lang ng serbisyo sa pagpapatupad at pag-access sa aming Online Trading Facility, kung saan pinapahintulutan nito ang pagtingin at/o paggamit sa nilalaman na makikita sa website o sa pamamagitan nito, at walang layuning palitan o palawigin ito, at hindi din ito papalitan o papalawigin. Ang naturang pag-access at paggamit ay palaging alinsunod sa: (i) Mga Tuntunin at Kundisyon; (ii) Mga Babala sa Risk; at (iii) Kabuuang Disclaimer. Kaya naman ang naturang nilalaman ay ituturing na pangkalahatang impormasyon lamang. Mangyaring isaalang-alang na ang mga nilalaman ng aming Online Trading Facility ay hindi paglikom, o alok, para magsagawa ng anumang transaksyon sa mga pinansyal na market. Ang pag-trade sa alinmang pinansyal na market ay nagtataglay ng mataas na lebel ng risk sa iyong kapital.
Lahat ng materyales na nakalathala sa aming Online Trading Facility ay nakalaan para sa layuning edukasyonal/pang-impormasyon lamang at hindi naglalaman – at hindi dapat ituring bilang naglalaman – ng payo at rekomendasyon na pangpinansyal, tungkol sa buwis sa pag-i-invest, o pang-trade, o tala ng aming presyo sa pag-trade, o alok para sa, o paglikom ng, transaksyon sa alinmang pinansyal na instrument o hindi ginustong pinansyal na promosyon.
Sa anumang nilalaman na galing sa ikatlong partido, pati na ang mga nilalaman na inihanda ng XM, ang mga naturang opinyon, balita, pananaliksik, pag-analisa, presyo, ibang impormasyon o link sa ibang mga site na makikita sa website na ito ay ibibigay tulad ng nandoon, bilang pangkalahatang komentaryo sa market at hindi ito nagtataglay ng payo sa pag-i-invest. Kung ang alinmang nilalaman nito ay itinuring bilang pananaliksik sa pag-i-invest, kailangan mong isaalang-alang at tanggapin na hindi ito inilaan at inihanda alinsunod sa mga legal na pangangailangan na idinisenyo para maisulong ang pagsasarili ng pananaliksik sa pag-i-invest, at dahil dito ituturing ito na komunikasyon sa marketing sa ilalim ng mga kaugnay na batas at regulasyon. Mangyaring siguruhin na nabasa at naintindihan mo ang aming Notipikasyon sa Hindi Independyenteng Pananaliksik sa Pag-i-invest at Babala sa Risk na may kinalaman sa impormasyong nakalagay sa itaas, na maa-access dito.
