It was reported in December 2023 that Sellafield, the UKs most significant nuclear power station and site of nuclear waste storage was hacked.

← Back to Blog

It was reported in December 2023 that Sellafield, the UKs most significant nuclear power station and site of nuclear waste storage was hacked. An allegation that was denied at the time (https://lnkd.in/dT_tDDta). A hack that may have been on going for several years, and went unreported to the Nuclear Regulator over several years.

Criminal charges are being bought by the UK Office for Nuclear Regulation. The legal Council for Sellafield stated that cybersecurity was “not sufficiently adhered to for a period”. But its all OK (sarc), as Sellafield said that that it was important to know that there was never a successful cyber attack on Sellafield………great to know given its significance as a CNI provider and the largest store of plutonium in the world.

Investigations found that critical security vulnerabilities were identified as far back as 2012. In a turn of phrase, things were so bad that Sellafields computer systems were nicknamed Voldemort.

One wonders what this means for Sellafield. Is it the company facing criminal charges or will these extend down to the leadership of the firm, both past and present management. Clearly governance over security and cybersecurity has failed and one is aware that the only way you focus managements attention on significant risk issues, is if they themselves feel the risk of non compliance.

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC Office for Nuclear Regulation

#cybersecurity #cyberriskmanagement #cyberattacks

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7209817387787833344