US pipeline operators become targets of a cyberattack

US-based natural-gas pipeline operator Oneok temporarily halted its computer communications last week as a shared data network was targeted by cybercriminals.

The interruption to customer transactions was taken as a precautionary measure but the attacks did not lead to an interruption in gas service.

This move was in response to a report that Energy Transfer Partners, Boardwalk Pipeline Partners and Chesapeake Utilities Corp’s Eastern Shore Natural Gas experienced disruptions to their communications systems.

It is yet to be ascertained if any customer data was stolen by the hackers.

In the US energy sector, there is said to be a growing reliance on digital systems to run critical infrastructures such as control valves and pressure monitors. This equipment is essential to the operation of refineries and oil wells and a cyberattack could disrupt the entire operating system.

Law firm Jones Walker’s cybersecurity expert Andrew R. Lee was quoted by New York Times highlighting risks such as “explosions, spills, or fires, which easily will threaten human life, property and the environment.”

Nozomi Networks co-founder and chief product officer Andrea Carcano said: “The supply chain cyberattack that disrupted a chain of natural gas companies serves is yet another reminder that oil and gas organisations are high-risk targets.

“Attacks against them are growing, as evidenced by the recent Ponemon study that shows that 68% of oil and gas organisations have experienced at least one cyber compromise.

“In this case, operations were not ultimately impacted and it’s not immediately clear that they were the target, however, we know that attackers often use IT networks and third-party resources to gain entry to operational technology (OT) networks. That’s why organisations must ensure that IT and OT security efforts are effectively aligned to achieve the best possible protection.”