Call us now:
US Nuclear contractor Westech International a supplier to the US DoD and Energy sector, a subcontractor to Northrup Grumman; providing support to the US Minuteman III ICBM nuclear deterrent. Has confirmed that it has suffered from a cyber attack by MAZE. Resulting in a ransomware and potential data theft.
As a supplier to the DoD I have assumed that Westech would be required to implement DFARS 252.204.7012 and NIST 800 – 171 for safeguarding CUI. Or that Northrup Grumman would have to comply and pass this down through its supply chain. In addition to implementing controls to secure classified and sensitive data. Time will tell is there was any impact to national security from the data theft which I am sure will be managed.
This type of attack on the defence supply chain highlights the current DFARS compliance requirements which are in place across the Defence Industry Base (DIB), and for the development of the related CMMC programme as part of the DoDs supply chain cyber security programme.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6674607560793841664