Cyberattacks on US utilities surged 70% this year, says Check Point
By Seher Dareen and Vallari Srivastava
Sept 11 (Reuters) -U.S. utilities faced a near 70% jump in cyberattacks this year over the same period in 2023, according to data from Check Point Research, underlining the escalating threat to a critical infrastructure.
The utilities and power infrastructure across the U.S. are becoming increasingly vulnerable as the grid expands rapidly to meet surging demand for power and assets are digitalized.
Utilities are low-hanging fruit for cyberattacks because many of them use outdated software, said Douglas McKee of cyber security firm SonicWall.
To date, the attacks have not crippled any U.S. utility, but industry experts warn a coordinated attempt could be devastating, impacting essential services and causing substantial financial losses.
There were 1,162 cyberattacks on average through August this year, compared to 689 in 2023, Check Point data showed.
The energy sector is considered to be more vulnerable to such attacks. In May 2021, fuel pipeline operator Colonial Pipeline was forced to shut down its entire network due to one of the biggest cyberattack incidents on the energy industry.
More recently, U.S. oilfield services firm Halliburton HAL.N disclosed that an unauthorized third party had accessed and removed data from its systems.
The utilitiesindustry depends on IoT and ICS (Internet of Things and Incident Command System) technology, which are not as advanced in their cyber defenses as the software used by Apple AAPL.O or Microsoft MSFT.O, McKee said.
Compliance with regulations such as the North American Electric Reliability Corp's (NERC) Critical Infrastructure Protection, which safeguards bulk power systems from cyber threats, only provide a minimum standard or protection, experts said.
The expansion of the grid, including incremental interconnections to new customers like Gen-AI data centers, is creating more potential points of attack.
Earlier this year, NERC said the number of susceptible points on the U.S. electrical networks has been increasing by about 60 per day.
Several major U.S. companies have suffered ransomware attacks in recent years, including UnitedHealth Group's UNH.N Change Healthcare unit in February.
"If an equivalent attack occurred that was on the scale of Change Healthcare…the impact could be completely devastating," said Kevin Kirkwood, chief information security officer at Foster City, California-based cybersecurity provider Exabeam.
Even breaches that do not directly compromise critical infrastructure could lead to significant financial losses, said Wayne Tung, managing director at Sendero Consulting.
The average cost of a data breach in the energy sector reached a global high of $4.72 million, IBM reported in 2022.
Historically, election years also fuel heightened malicious cyber activity.
"With the upcoming U.S. election, we can expect a surge in cyberattacks on critical infrastructure, including utilities, energy grids, and communication networks," said Nataliia Zdrok, Senior Threat Intelligence Analyst at Binary Defense.
Average Weekly Cyber Attacks per Organization in U.S. https://reut.rs/3ATzUtA
Reporting by Seher Dareen and Vallari Srivastava in Bengaluru; writing by Mrinalika Roy; Editing by Sriraj Kalluvila
免责声明: XM Group仅提供在线交易平台的执行服务和访问权限，并允许个人查看和/或使用网站或网站所提供的内容，但无意进行任何更改或扩展，也不会更改或扩展其服务和访问权限。所有访问和使用权限，将受下列条款与条例约束：(i) 条款与条例；(ii) 风险提示；以及(iii) 完整免责声明。请注意，网站所提供的所有讯息，仅限一般资讯用途。此外，XM所有在线交易平台的内容并不构成，也不能被用于任何未经授权的金融市场交易邀约和/或邀请。金融市场交易对于您的投资资本含有重大风险。
所有在线交易平台所发布的资料，仅适用于教育/资讯类用途，不包含也不应被视为用于金融、投资税或交易相关咨询和建议，或是交易价格纪录，或是任何金融商品或非应邀途径的金融相关优惠的交易邀约或邀请。
本网站上由XM和第三方供应商所提供的所有内容，包括意见、新闻、研究、分析、价格、其他资讯和第三方网站链接，皆保持不变，并作为一般市场评论所提供，而非投资性建议。所有在线交易平台所发布的资料，仅适用于教育/资讯类用途，不包含也不应被视为适用于金融、投资税或交易相关咨询和建议，或是交易价格纪录，或是任何金融商品或非应邀途径的金融相关优惠的交易邀约或邀请。请确保您已阅读并完全理解，XM非独立投资研究提示和风险提示相关资讯，更多详情请点击 这里。
