This while pipeline hack really grinds my gears. This infrastructure company didn’t do backups? What kind of half assed IT department do they have anyway? They should have had a backup plan in place with second copies in off-site storage. We did this 36 years ago. I know, I was a computer operator in 1984 doing backups. Iron Mountain did our off-site storage.
They now have services that can do live backups. Instantaneous. Things can be restored back to the last minute before a ransomeware attack.
Second issue. Why were their servers even accessable to the outside internet? Critical servers MUST be off-line and anything on-line must be behind a firewall or VPN. Even 13 year old kids know this.
I’m not happy about this. People and companies they work for are idiots.
-SB
I’m just going to say this - I’m in the electric power industry - critical infrastructure (control systems, monitoring systems, etc.) for the bulk electric system are behind numerous firewalls and DMZs. Our control systems can only communicate with the corporate system in very small, highly-controlled and monitored manners, and only so that specific ‘mission-critical’ data can be exchanged with those that need it.
It’s pretty complex overall, but it’s nearly bulletproof. I say nearly because there’s always someone finding new ways to overcome security measures, even through multiple layers such as we use in the power industry.
I have no reason to believe that an energy outfit like this doesn’t have similar safeguards.
I thought I had read that they took the oil/gas transportation system off line as a precaution to ensure that it was safe/clear of malware from the hacker thugs. If so, it was a wise decision to be extra cautious.
I’ll withhold total judgement until the full story comes out - if it comes out.